gecko-dev/dom/security/test/csp/file_strict_dynamic.js

document.getElementById("testdiv").innerHTML = "allowed";