<!DOCTYPE html>
<html lang="en">
  <head>
    <!-- This tests that we properly handle multiple policies when one includes strict-dynamic and another unsafe-inline. -->
    <meta http-equiv="Content-Security-Policy" content="script-src 'nonce-dummy' 'strict-dynamic'">
    <meta http-equiv="Content-Security-Policy" content="script-src 'unsafe-inline'">
    <meta http-equiv="content-type" content="text/html; charset=UTF-8">
    <script nonce="dummy">
      if (window.testRunner) {
        testRunner.dumpAsText();
      }
    </script>
  </head>
  <body>
    <script type="text/javascript" nonce="dummy">console.log('allowed');</script>
  </body>
</html>