content-security-policy-issue-eval.php

<?php
header("Content-Security-Policy: script-src 'self' 'unsafe-inline';");
?>
<!DOCTYPE html>
<html>
  <body>
    <h2>Webpage with not allowed eval()</h2>

    <script>alert(eval('7+10'))</script>
  </body>
</html>

chromium/third_party/blink/web_tests/http/tests/inspector-protocol/resources/content-security-policy-issue-eval.php