chromium/chrome/test/data/extensions/api_test/content_security_policy/test.html

<script>
window.inlineCanary = "FAIL: This script should not run!";
</script>
<script src="test.js"></script>