fune/dom/security/test/csp/file_docwrite_meta.js

// set a variable on the document which we can check to verify
// whether the external script was loaded or blocked
document.myMetaCSPScript = "external-JS-loaded";