HTML Code

<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="utf-8">
  <title>securitypolicyviolation log</title>
  <meta http-equiv="Content-Security-Policy" content="img-src 'none'; script-src 'unsafe-inline'">
  <style>
    #out { white-space: pre-wrap; border: 1px solid #ccc; padding: 10px; }
  </style>
</head>
<body>
  <p>A blocked remote image is inserted below. Watch the log.</p>
  <pre id="out">(waiting for CSP violation…)</pre>
  <script>
    var out = document.getElementById("out");
    document.addEventListener("securitypolicyviolation", function (e) {
      out.textContent =
        e.blockedURI + "\n" +
        e.violatedDirective + "\n" +
        e.originalPolicy;
    });
    var img = document.createElement("img");
    img.alt = "blocked";
    img.src = "https://example.com/x.png";
    document.body.appendChild(img);
  </script>
</body>
</html>

Lines: 0 | Characters: 0

Live Preview Auto-refresh on Run

Document securitypolicyviolation — MDN log (Try It)