Inline script should not run without 'unsafe-inline' script-src directive, even for script-src *.

Summary

Harness status: OK

Found 3 tests

Details

ResultTest NameMessage
PassInline script block
Asserts runNo asserts ran
PassInline event handler
Asserts runNo asserts ran
PassShould fire policy violation events
Asserts run
Pass
assert_false(false)
    at Test.<anonymous> ( /content-security-policy/script-src/inlineTests.js:11:7)
Pass
assert_false(false)
    at Test.<anonymous> ( /content-security-policy/script-src/inlineTests.js:14:7)