blob://example.com/3dfab3bd-a892-4448-92c3-de92d8eed2ea
```
```
```
Refused to execute inline event handler because it violates the following Content Security Policy directive: "script-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-...'), or a nonce ('nonce-...') is required to enable inline execution. Note that hashes do not apply to event handlers, style attributes and javascript: navigations unless the 'unsafe-hashes' keyword is present.
```
angular.min.js
```js
/*
AngularJS v1.8.3
(c) 2010-2020 Google LLC. http://angularjs.org
License: MIT
*/
(function(z)...
```
PoC:
```html