blob: 680e5892c936ef15e7948a1f05581b1ed6778372 [file] [log] [blame]
A `strict-dynamic` policy can be served in a META tag.
PASS Script injected via `appendChild` is allowed with `strict-dynamic`.
PASS Script injected via `appendChild` is allowed with `strict-dynamic`, even if it carries an incorrect nonce.
PASS Script injected via `appendChild` populated via `textContent` is allowed with `strict-dynamic`.
PASS Script injected via `appendChild` populated via `textContent` is allowed with `strict-dynamic`, even if it carries an incorrect nonce.