file_strict_dynamic_non_parser_inserted_inline.html (379B)
1 <!DOCTYPE HTML> 2 <html> 3 <head> 4 <title>Bug 1299483 - CSP: Implement 'strict-dynamic'</title> 5 </head> 6 <body> 7 <div id="testdiv">blocked</div> 8 9 <script nonce="foo"> 10 var dynamicScript = document.createElement('script'); 11 dynamicScript.textContent = 'document.getElementById("testdiv").textContent="allowed"'; 12 document.head.appendChild(dynamicScript); 13 </script> 14 15 </body> 16 </html>