OLD | NEW |
---|---|
(Empty) | |
1 <!DOCTYPE html> | |
2 <html> | |
3 <head> | |
4 <meta http-equiv="Content-Security-Policy-Report-Only" content="script-src ' self' 'unsafe-inline'; report-uri resources/save-report.php"> | |
5 </head> | |
6 <body> | |
7 <script> | |
8 try { | |
9 eval("alert('PASS: eval() allowed!')"); | |
10 } catch (e) { | |
11 console.log('FAIL: eval() blocked!'); | |
12 } | |
13 </script> | |
14 <script src="resources/go-to-echo-report.js"></script> | |
15 </body> | |
16 </html> | |
OLD | NEW |