| Pass | (script-src) Eval code should not execute from iframe in iframe | Asserts run| Pass | assert_equals("blocked", "blocked")
at Test.<anonymous> ( /content-security-policy/unsafe-eval/eval-in-iframe.html:33:11) |
|
| Pass | (script-src) Eval code should execute from iframe in parent | Asserts run| Pass | assert_equals("allowed", "allowed")
at Test.<anonymous> ( /content-security-policy/unsafe-eval/eval-in-iframe.html:37:11) |
|
| Pass | (script-src) Eval code should not execute from parent in iframe | Asserts run| Pass | assert_throws_js(function "function EvalError() { [native code] }", function "_ => child.contentWindow.eval('1+1')")
at Test.<anonymous> ( /content-security-policy/unsafe-eval/eval-in-iframe.html:41:11) |
|
| Pass | (default-src) Eval code should not execute from iframe in iframe | Asserts run| Pass | assert_equals("blocked", "blocked")
at Test.<anonymous> ( /content-security-policy/unsafe-eval/eval-in-iframe.html:33:11) |
|
| Pass | (default-src) Eval code should execute from iframe in parent | Asserts run| Pass | assert_equals("allowed", "allowed")
at Test.<anonymous> ( /content-security-policy/unsafe-eval/eval-in-iframe.html:37:11) |
|
| Pass | (default-src) Eval code should not execute from parent in iframe | Asserts run| Pass | assert_throws_js(function "function EvalError() { [native code] }", function "_ => child.contentWindow.eval('1+1')")
at Test.<anonymous> ( /content-security-policy/unsafe-eval/eval-in-iframe.html:41:11) |
|