blob: d82ee6ae260aa0336b4ae643065839a6d9a1b7b6 [file] [log] [blame]
<?php
header("Content-Security-Policy: script-src 'self' 'unsafe-inline';");
?>
<!DOCTYPE html>
<html>
<body>
<h2>Webpage with not allowed eval()</h2>
<script>alert(eval('7+10'))</script>
</body>
</html>