How to break your site with a content security policy: an illustrated example

I wanted to share this to demonstrate that whilst awesome, it’s easy to break things you never expected