script-src-1_2_1.html (723B)
1 <!DOCTYPE HTML> 2 <html> 3 <head> 4 <title>Inline script attached by DOM manipulation should not run without an 'unsafe-inline' script-src policy, even with default-src *</title> 5 <meta http-equiv="Content-Security-Policy" content="script-src *;"> 6 <script src='/resources/testharness.js'></script> 7 <script src='/resources/testharnessreport.js'></script> 8 </head> 9 <body> 10 <h1>Inline script attached by DOM manipulation should not run without an 'unsafe-inline' script-src policy, even with default-src *</h1> 11 <div id="log"></div> 12 13 <div id=attachHere></div> 14 15 <script id=emptyScript></script> 16 17 <div id=emptyDiv></div> 18 19 <script src="addInlineTestsWithDOMManipulation.js"></script> 20 </body> 21 </html>