Sign in
webkit
/
WebKit
/
cca3b771b524f4d40cac25de02ae46d5189d1489
/
.
/
LayoutTests
/
imported
/
w3c
/
web-platform-tests
/
content-security-policy
/
script-src
/
script-src-strict_dynamic_double_policy_report_only-expected.txt
blob: e7bf79c0fdc2e3a6d2dec2f74f6dff74cef0c0a2 [
file
] [
log
] [
blame
]
A separate Report-Only policy does not influence `strict-dynamic` in the script-src directive.
PASS Script injected via `appendChild` is allowed with `strict-dynamic` + Report-Only `script-src 'none'` policy.