In the past few days, I tried to bypass CSP on a specific site. As a last resort, I decided to ask here in the group :)

I have a site that I successfully accomplished to trigger XSS vulnerability. The problem is that I have CSP that blocks my js from triggering. I tested many methods in order to bypass the CSP but without any success so far.

---Example Payload--- https://example.com/reviews/top/single/id/;%22><a%20href='javascript:alert(1111)'>111111

Thanks.

CSP Settings: