eval() should not run without 'unsafe-eval' script-src directive.

Summary

Harness status: OK

Found 3 tests

Details

ResultTest NameMessage
PassTest that securitypolicyviolation event is fired
Asserts run
Pass
assert_equals("script-src", "script-src")
    at Test.<anonymous> ( /content-security-policy/script-src/script-src-1_4.html:17:13)
Passeval() should throw without 'unsafe-eval' keyword source in script-src directive.
Asserts run
Pass
assert_throws_js(function "function EvalError() { [native code] }", function "function() { eval('evalRan = true;') }")
    at Test.<anonymous> ( /content-security-policy/script-src/script-src-1_4.html:22:26)
Passeval() should not run without 'unsafe-eval' script-src directive.
Asserts run
Pass
assert_false(false)
    at Test.<anonymous> ( /content-security-policy/script-src/script-src-1_4.html:24:26)