 <html>
      <head>
        <title>CSP Inline Event Handlers Violations Test</title>
      </head>
      <body onload="document.body.textContent = 'JavaScript executed!';">
        JavaScript should not execute.
      </body>
</html>
