HTML Code

<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="utf-8">
  <title>synthetic CSP event</title>
  <style>
    #out { border: 1px solid #ccc; padding: 10px; margin-bottom: 12px; }
  </style>
</head>
<body>
  <pre id="out">Click to dispatch a demo SecurityPolicyViolationEvent.</pre>
  <button id="btn" type="button">Fire synthetic violation</button>
  <script>
    var out = document.getElementById("out");
    document.addEventListener("securitypolicyviolation", function (e) {
      out.textContent =
        "Heard violation: " + e.violatedDirective +
        " → " + e.blockedURI +
        " (" + e.disposition + ")";
    });
    document.getElementById("btn").addEventListener("click", function () {
      if (typeof SecurityPolicyViolationEvent !== "function") {
        out.textContent = "SecurityPolicyViolationEvent constructor missing";
        return;
      }
      document.dispatchEvent(
        new SecurityPolicyViolationEvent("securitypolicyviolation", {
          blockedURI: "https://cdn.example/demo.js",
          violatedDirective: "script-src",
          effectiveDirective: "script-src",
          originalPolicy: "script-src 'self'",
          disposition: "report",
          documentURI: location.href,
          statusCode: 200
        })
      );
    });
  </script>
</body>
</html>

Lines: 0 | Characters: 0

Live Preview Auto-refresh on Run

Document securitypolicyviolation — synthetic event (Try It)