Note: This feature is available in Web Workers.
The sourceFile read-only property of the SecurityPolicyViolationEvent interface is a string representing the URL of the script in which the Content Security Policy (CSP) violation occurred.
A string representing the URL of the script in which the violation occurred, or null if the violation is not in a script.
Note that both columnNumber and lineNumber should have non-null values if this property is not null.
document.addEventListener("securitypolicyviolation", (e) => {
console.log(e.sourceFile);
});