| <!DOCTYPE html> | |
| <meta http-equiv="Content-Security-Policy" content="script-src 'self'" /> | |
| <html> | |
| <body> | |
| <h2>Webpage with an oopif causing an issue of inline violation type</h2> | |
| <div> | |
| <script class="violating-script"> | |
| alert("This should be blocked by CSP"); | |
| </script> | |
| </div> | |
| </body> | |
| </html> |