CSP Bypass in DVWA

In this post, the DVWA Content Security Policy [CSP] Bypass vulnerability is described. The objective for attacks on all levels is to bypass the CSP and execute JavaScript in the vulnerable web page.