Code AnalysisBeginner 60s

Trace: CSP Script-Src

Does inline script pass strict CSP?

Starter code

const csp="script-src 'self'";
const hasUnsafe=csp.includes('unsafe-inline');
console.log(!hasUnsafe?'blocked':'allowed')

Think you can answer under pressure?

Get matched and answer live questions in 3-minute 1v1 battles. Elo ranking, badge tiers and bragging rights on the line.