| ALERT: PASS (1/2) | |
| ALERT: PASS (2/2) | |
| CONSOLE MESSAGE: line 15: Refused to execute a script because its hash, its nonce, or 'unsafe-inline' does not appear in the script-src directive of the Content Security Policy. | |
| This tests that a valid nonce disables inline JavaScript, even if 'unsafe-inline' is present. |