Sign in
chromium
/
external
/
github.com
/
WebKit
/
webkit
/
refs/heads/main
/
.
/
LayoutTests
/
http
/
wpt
/
content-security-policy
/
duplicate-html-hide-nonce-attribute.https.html
blob: ae8daf6e70d603f0546214fcf349a6e27f0bf5ce [
file
] [
log
] [
blame
] [
edit
]
<!DOCTYPE html>
<body>
<h1>
CSP Nonce Bypass
</h1>
Hello
<style>
html
[
nonce
*=
secret
]{
background
:
red
}
</style>
<html
<script
nonce
=
"secret"
src
=
"resources/dummy.js"
></script>
</body>
</html>