fune/dom/security/test/csp/file_strict_dynamic_default_src.js

document.getElementById("testdiv").innerHTML = "allowed";