Inline script attached by DOM manipulation should not run without an 'unsafe-inline' script-src policy, even with default-src *

Summary

Harness status: OK

Found 2 tests

Details

ResultTest NameMessage
PassTest that securitypolicyviolation event is fired
Asserts run
Pass
assert_equals("script-src-elem", "script-src-elem")
    at Test.<anonymous> ( /content-security-policy/script-src/addInlineTestsWithDOMManipulation.js:6:4)
PassDOM manipulation inline tests
Asserts runNo asserts ran