Positive test case: Inline script should run 'unsafe-inline' script-src directive.