blob: 9cc567d7b6c4ef1a780a166e8f157e389d0996d7 [file] [log] [blame]
ALERT: /PASS/
CONSOLE MESSAGE: line 1: EvalError: Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "script-src 'unsafe-inline'".
Eval should be blocked in the iframe, but inline script should be allowed.