CSP Bypass in Chrome Canary + AngularJS

• About this thing... CSP Bypass using class, AngularJS and a GIF
• People asked for a demo - so here it is!
• Open this page in Chrome Canary with HTML Imports enabled (chrome://flags/#enable-html-imports)
• Witness the alert :)

• Here's the GIF we are using!
• view-source: on that GIF
• Our GIF - does it have dimensions a.k.a. is it valid?