1 2 3 4 5 6 7 8 9
<html> <head> <meta charset="utf-8"> <meta http-equiv="Content-Security-Policy" content="child-src https://example.com; script-src 'nonce-foo'">"; </head> <body> <script type="text/javascript" src="file_worker_src.js" nonce="foo"></script> </body> </html>