eval-allowed-by-hash.sub.html

mozilla-central/testing/web-platform/tests/content-security-policy/unsafe-eval/tentative/eval-allowed-by-hash.sub.html

Enable keyboard shortcuts

Source code

File a bug in Core :: DOM: Security

Revision control

Copy as Markdown

Other Tools

Test Info: Warnings

This test has a WPT meta file that expects 1 subtest issues.
This WPT test may be referenced by the following Test IDs:
- /content-security-policy/unsafe-eval/tentative/eval-allowed-by-hash.sub.html - WPT Dashboard Interop Dashboard

<!DOCTYPE html>

<html>

<head>

    <meta http-equiv="Content-Security-Policy" content="script-src 'self' 'unsafe-inline' 'eval-sha256-wrhs7MZ7Cmwwzxiy9buBGGkLT/3SLW3Sp8UrVRoCohU=' 'eval-sha256-c5YuHHbdlyO3hSF772XFkVAUv6UDNMrNFOxOE9yWwgY='; connect-src 'self';">

    <title>eval-allowed</title>

    <script src="/resources/testharness.js"></script>

    <script src="/resources/testharnessreport.js"></script>

    <script src="../../support/logTest.sub.js?logs=[]"></script>

    <script src='../../support/alertAssert.sub.js?alerts=["PASS (1 of 2)","PASS (2 of 2)"]'></script>

</head>

<body>

    <script>

        window.addEventListener('securitypolicyviolation', function(e) {

            log("Fail");

});

        eval("alert_assert('PASS (1 of 2)')");

        window.eval("alert_assert('PASS (2 of 2)')");

    </script>

    <div id="log"></div>

</body>

</html>