<!DOCTYPE html> | |
<html> | |
<head> | |
<meta http-equiv="Content-Security-Policy" content="script-src 'self'"> | |
<script src="resources/allow-inline-script.js"></script> | |
</head> | |
<body> | |
<p>Tests that an inline JavaScript script, in a user agent shadow tree, is allowed to load when the page has CSP policy: <code>script-src 'self'</code>.</p> | |
<div id="shadow-host"></div> | |
<p id="result">FAIL did not execute inline script.</p> | |
</body> | |
</html> |