HTML Code

<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="utf-8">
  <meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src 'unsafe-inline'; style-src 'unsafe-inline'; img-src 'none'">
  <title>CSP properties</title>
  <style>pre { white-space: pre-wrap; font: 13px monospace; }</style>
</head>
<body>
  <pre id="out">waiting…</pre>
  <script>
    var out = document.getElementById("out");
    document.addEventListener("securitypolicyviolation", function (e) {
      out.textContent =
        "directive=" + e.violatedDirective +
        "\nblocked=" + e.blockedURI +
        "\ndisposition=" + e.disposition;
    });
    var img = new Image();
    img.src = "https://example.com/blocked.png";
  </script>
</body>
</html>

Lines: 0 | Characters: 0

Live Preview Auto-refresh on Run

Element securitypolicyviolation — key properties (Try It)