OLD | NEW |
1 <!DOCTYPE html> | 1 <!DOCTYPE html> |
2 <html> | 2 <html> |
3 <head> | 3 <head> |
4 <meta http-equiv="Content-Security-Policy" content="script-src 'nonce-hello'"> | |
5 <script src="external-script.js"></script> | 4 <script src="external-script.js"></script> |
6 <script nonce="hello" src="external-script-with-nonce.js"></script> | 5 <script nonce="hello" src="external-script-with-nonce.js"></script> |
7 <script> | 6 <script> |
8 document.inlineScriptHasRun = true; | 7 document.inlineScriptHasRun = true; |
9 eval("document.evalFromInlineHasRun = true;"); | 8 eval("document.evalFromInlineHasRun = true;"); |
10 </script> | 9 </script> |
11 | 10 |
12 <script nonce="hello"> | 11 <script nonce="hello"> |
13 document.inlineScriptWithNonceHasRun = true; | 12 document.inlineScriptWithNonceHasRun = true; |
14 eval("document.evalFromInlineWithNonceHasRun = true;"); | 13 eval("document.evalFromInlineWithNonceHasRun = true;"); |
15 </script> | 14 </script> |
16 </head> | 15 </head> |
17 </html> | 16 </html> |
OLD | NEW |