iframe_inline.sub.html

Enable keyboard shortcuts

<!-- Same as iframe.sub.html, but the script is inserted from an inline script. -->

<!DOCTYPE html>

<html>

<body>

    <script nonce='forinlinescript'>

        window.addEventListener('securitypolicyviolation', function() {

          top.postMessage('CSP_VIOLATION', '*');

});

    </script>

<!-- sha256 of the script below is 'F8UqObF6TSi2W4dDcDzAOAplJkYovBE6JpJjsZJy5HA=' -->

<script>

var s = document.createElement('script');

s.type = 'text/javascript';

s.src = "externalScript.js";

document.getElementsByTagName('head')[0].appendChild(s);

</script>

</body>

</html>