blob: 28b191ca2d83868ebd208f4507afdf99c3027bd3 [file] [log] [blame]
ALERT: PASS (1/2)
ALERT: PASS (2/2)
CONSOLE MESSAGE: Refused to execute a script because its hash, its nonce, or 'unsafe-inline' does not appear in the script-src directive of the Content Security Policy.
This tests that a valid nonce disables inline JavaScript, even if 'unsafe-inline' is present.