ALERT: Running test #1
ALERT: Isolated world with no CSP
CONSOLE ERROR: Running the JavaScript URL violates the following Content Security Policy directive 'script-src 'self' 'unsafe-eval''. Either the 'unsafe-inline' keyword, a hash ('sha256-...'), or a nonce ('nonce-...') is required to enable inline execution. Note that hashes do not apply to event handlers, style attributes and javascript: navigations unless the 'unsafe-hashes' keyword is present. The action has been blocked.
ALERT: Running test #2
ALERT: Isolated world with permissive CSP
ALERT: iframe javascript: src running
ALERT: Running test #3
ALERT: Isolated world with strict CSP
CONSOLE ERROR: Running the JavaScript URL violates the following Content Security Policy directive 'script-src 'none''. Either the 'unsafe-inline' keyword, a hash ('sha256-...'), or a nonce ('nonce-...') is required to enable inline execution. Note that hashes do not apply to event handlers, style attributes and javascript: navigations unless the 'unsafe-hashes' keyword is present. The action has been blocked.
ALERT: Running test #4
This test verifies the behavior of navigations to javascript urls in isolated worlds and its interaction with the isolated world CSP.