csp-script-src-strict-dynamic.html (588B)
1 <!DOCTYPE html> 2 3 <head> 4 <meta http-equiv="Content-Security-Policy" 5 content="script-src 'nonce-1' 'nonce-2' 'nonce-3' 'nonce-4' 'nonce-5' 'strict-dynamic'"> 6 </head> 7 <script src="/common/utils.js" nonce="1"></script> 8 <script src="/resources/testharness.js" nonce="2"></script> 9 <script src="/resources/testharnessreport.js" nonce="3"></script> 10 <script src="utils.js" nonce="4"></script> 11 <script src="csp-script-src.js" nonce="5"></script> 12 <script> 13 const params = new URLSearchParams(location.search); 14 writeValueToServer(params.get('key'), "csp is ignored unexpectedly"); 15 </script>