<!DOCTYPE HTML>
<html>
  <head>
    <meta charset=utf-8>
    <meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate" />
    <meta http-equiv="Pragma" content="no-cache" />
    <meta http-equiv="Expires" content="0" />
    <meta http-equiv="Content-Security-Policy" content="script-src 'none'; style-src 'none';">
    <title>Tests breaking CSP with script</title>
    <link href="internal-loaded.css" rel="stylesheet" type="text/css">
  </head>
  <body>

    The script in this page will CSP:

    <script src="js_websocket-worker-test.js"></script>
  </body>
</html>
