file_strict_dynamic_script_inline.html (249B)
1 <!DOCTYPE HTML> 2 <html> 3 <head> 4 <title>Bug 1299483 - CSP: Implement 'strict-dynamic'</title> 5 </head> 6 <body> 7 <div id="testdiv">blocked</div> 8 9 <script nonce="foo"> 10 document.getElementById("testdiv").innerHTML = "allowed"; 11 </script> 12 13 </body> 14 </html>