chromium/src/third_party/blink/web_tests/external/wpt/content-security-policy/script-src/eval-allowed-in-report-only-mode.html - manifest_repos/chromium_src - Git at Google

 <html>
 <head>
   <script src="/resources/testharness.js"></script>
   <script src="/resources/testharnessreport.js"></script>
   <!-- Content-Security-Policy-Report-Only: script-src 'unsafe-inline' -->
 </head>
 <body>
   <script>
     var t = async_test("Eval is allowed because the CSP is report-only");
     try {
       eval("t.done()");
     } catch {
       t.step(function() { assert_true(false, "The eval should have execute succesfully"); })
     }
   </script>
 </body>
 </html>
	<html>
	<head>
	<script src="/resources/testharness.js"></script>
	<script src="/resources/testharnessreport.js"></script>
	<!-- Content-Security-Policy-Report-Only: script-src 'unsafe-inline' -->
	</head>
	<body>
	<script>
	var t = async_test("Eval is allowed because the CSP is report-only");
	try {
	eval("t.done()");
	} catch {
	t.step(function() { assert_true(false, "The eval should have execute succesfully"); })
	}
	</script>
	</body>
	</html>