Without CSP Demo #1
Evil JavaScript is loaded without being stopped
View Source On This Page
There is a JavaScript tag present on this page that you do not want!
If you view the source of this page you will see that there is a JavaScript tag present that you would definitely not want to load on this page! Because the browser has no knowledge of what should or should not be here, it will load the JavaScript.
<script src="https://evil-cyber-hacker.com/evil-things.js"></script>