Web - Client

Hello everyone

I’m stuck in part of "DOM Clobbering" challenge. I can’t find a way to bypass CSP. The main exploits techqniue work and I can change the src of script. But it didn’t work because of CSP restrications. Clould you please give me a hand?

Thank you very much

Same here, I can modify URL but can’t find a way to bypass CSP