<!DOCTYPE HTML> <html> <head> <meta charset="utf-8"> <title>Testpage for CSP violation (inline script)</title> </head> <body> CSP violation test succeeded. <script> // This inline script would override the success string if loaded. document.body.innerHTML = "CSP violation test failed."; </script> </body> </html>