HTML Code

<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="utf-8">
  <title>CSP fields</title>
  <meta http-equiv="Content-Security-Policy" content="img-src 'none'; script-src 'unsafe-inline'">
  <style>
    #out { white-space: pre-wrap; border: 1px solid #ccc; padding: 10px; }
  </style>
</head>
<body>
  <pre id="out">(waiting…)</pre>
  <script>
    var out = document.getElementById("out");
    document.addEventListener("securitypolicyviolation", function (e) {
      out.textContent =
        "disposition: " + e.disposition + "\n" +
        "effectiveDirective: " + e.effectiveDirective + "\n" +
        "documentURI: " + e.documentURI + "\n" +
        "blockedURI: " + e.blockedURI;
    });
    var img = document.createElement("img");
    img.alt = "blocked";
    img.src = "https://example.com/x.png";
    document.body.appendChild(img);
  </script>
</body>
</html>

Lines: 0 | Characters: 0

Live Preview Auto-refresh on Run

Document securitypolicyviolation — key fields (Try It)