blob: ba8c011506f35acb2d57f8fc25e63b0ad793b33a [file] [log] [blame]
A separate policy with more nonces works correctly with `strict-dynamic` in the script-src directive.
PASS Unnonced script injected via `appendChild` is not allowed with `strict-dynamic` + a nonce-only double policy.
PASS Script injected via `appendChild` with a correct nonce is allowed with `strict-dynamic` + a nonce-only double policy.