This tests that a valid nonce disables inline JavaScript, even if 'unsafe-inline' is present.

Summary

Harness status: OK

Found 1 tests

Details

ResultTest NameMessage
PassExpecting alerts: ["PASS (1/2)","PASS (2/2)", "violated-directive=script-src-elem"]
Asserts run
Pass
assert_equals("PASS (1/2)", "PASS (1/2)")
    at Test.<anonymous> ( /content-security-policy/script-src/scriptnonce-ignore-unsafeinline.sub.html:33:25)
Pass
assert_equals("PASS (2/2)", "PASS (2/2)")
    at Test.<anonymous> ( /content-security-policy/script-src/scriptnonce-ignore-unsafeinline.sub.html:33:25)
Pass
assert_equals("violated-directive=script-src-elem", "violated-directive=script-src-elem")
    at Test.<anonymous> ( /content-security-policy/script-src/scriptnonce-ignore-unsafeinline.sub.html:33:25)