http/tests/security/contentSecurityPolicy/resources/sandboxed-eval.php

<?php
header("X-WebKit-CSP: sandbox allow-scripts");
?>
<script>
alert('PASS (1/2): Script can execute');
</script>
<script>
eval("alert('PASS (2/2): Eval works')");
</script>
Done.