blockeduri-eval.html (781B)
1 <!doctype html> 2 <meta http-equiv="Content-Security-Policy" content="script-src 'self' 'unsafe-inline'"> 3 <script src="/resources/testharness.js"></script> 4 <script src="/resources/testharnessreport.js"></script> 5 <script> 6 async_test(t => { 7 var watcher = new EventWatcher(t, document, 'securitypolicyviolation'); 8 watcher.wait_for('securitypolicyviolation').then(t.step_func_done(e => { 9 assert_equals(e.blockedURI, "eval"); 10 assert_equals(e.lineNumber, 15); 11 assert_equals(e.columnNumber, 13); 12 })); 13 14 try { 15 eval("assert_unreached('eval() should be blocked."); 16 } catch (e) { 17 assert_equals(e.name, 'EvalError'); 18 } 19 }, "Eval violations have a blockedURI of 'eval'"); 20 </script>