iframe.sub.html (278B)
1 <!DOCTYPE html> 2 <html> 3 <body> 4 <script nonce='forinlinescript'> 5 window.addEventListener('securitypolicyviolation', function() { 6 top.postMessage('CSP_VIOLATION', '*'); 7 }); 8 </script> 9 <script src='{{GET[script_url]}}'></script> 10 </body> 11 </html>