Add files via upload

Michael Piatek · web-flow · commit 5cd29b6813f8 · 2018-11-19T13:06:00.000-08:00
diff --git a/cspbug.html b/cspbug.html
@@ -0,0 +1,11 @@
+<html><head>
+<meta http-equiv="Content-Security-Policy" content="script-src 'nonce-nonceval'">
+<script nonce="nonceval">
+
+const templateElement = document.createElement('template');
+templateElement.innerHTML = '<audio src=x onerror=alert(1)>';
+
+console.log('Executed whitelisted inline script');
+
+</script>
+</head></html>
