Unsafe Eval Scenario

Content-Security-Policy: script-src https://cdnjs.cloudflare.com 'unsafe-eval';

This page allows 'unsafe-eval'. Try injecting a script:

Submit