diff options
| author | Tianren Dong <tianrendong.dtr@gmail.com> | 2026-05-16 14:01:00 -0400 |
|---|---|---|
| committer | Tianren Dong <tianrendong.dtr@gmail.com> | 2026-05-16 14:01:00 -0400 |
| commit | b792f22f2c2ef4dfb7bd300e7381a186e34e0c18 (patch) | |
| tree | a31a4e6d1213478f5ac96e2208d1a1c16fc825b9 /test-suite/challenges/39-strict-csp-fallback.html | |
| parent | f133011c8ecda06ae63068649a9714c88a7b901e (diff) | |
0.15.25: fix reload after stale singleton
Diffstat (limited to 'test-suite/challenges/39-strict-csp-fallback.html')
| -rw-r--r-- | test-suite/challenges/39-strict-csp-fallback.html | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/test-suite/challenges/39-strict-csp-fallback.html b/test-suite/challenges/39-strict-csp-fallback.html new file mode 100644 index 0000000..93bd9cf --- /dev/null +++ b/test-suite/challenges/39-strict-csp-fallback.html @@ -0,0 +1,14 @@ +<!doctype html> +<meta charset="utf-8"> +<meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; object-src 'none'; base-uri 'none'"> +<title>39 strict CSP fallback</title> +<link rel="stylesheet" href="../_style.css"> +<script src="../_lib.js"></script> +<body> +<main> + <p>Goal: page blocks <code>unsafe-eval</code>. Agent should fall back to screenshot/coordinate observation and click the target without relying on snapshot/evaluate.</p> + <p id="hint">The green target is fixed at known viewport coordinates. Use a screenshot, then click inside it.</p> + <button id="cspTarget" aria-label="strict CSP target">CSP TARGET</button> +</main> +<script src="39-strict-csp-fallback.js"></script> +</body> |