Bypassing CSP via DOM clobbering | PortSwigger Research

https://portswigger.net/research/bypassing-csp-via-dom-clobbering