version-collision.html 472 B

1234567891011
  1. <head>
  2. <!-- "script-src 'unsafe-inline'" is required if we want to execute the inline <script> -->
  3. <meta http-equiv="Content-Security-Policy" content="default-src 'none'; connect-src 'self' https://cksource.com http://*.cke-cs.com; script-src 'self' 'unsafe-inline' https://cksource.com; img-src * data:; style-src 'self' 'unsafe-inline'; frame-src *">
  4. </head>
  5. <script>
  6. window.CKEDITOR_VERSION = 'the.colliding.version';
  7. </script>
  8. <div id="editor">
  9. <p>Foo</p>
  10. </div>