17 lines
474 B
HTML
17 lines
474 B
HTML
<html>
|
|
<head>
|
|
<script src="/resources/testharness.js"></script>
|
|
<script src="/resources/testharnessreport.js"></script>
|
|
<!-- Content-Security-Policy-Report-Only: script-src 'unsafe-inline' -->
|
|
</head>
|
|
<body>
|
|
<script>
|
|
var t = async_test("Eval is allowed because the CSP is report-only");
|
|
try {
|
|
eval("t.done()");
|
|
} catch {
|
|
t.step(function() { assert_true(false, "The eval should have execute succesfully"); })
|
|
}
|
|
</script>
|
|
</body>
|
|
</html>
|