<!DOCTYPE html>
<html>
    <head>
    <meta http-equiv="Content-Security-Policy" content="default-src 'self' 'nonce-abc' 'sha256-sc3CeiHrlck5tH2tTC4MnBYFnI9D5zp8f9odqnmGQjE='; connect-src 'self';">
    <title>script-hash allowed from default-src</title>
    <script src="/resources/testharness.js"></script>
    <script src="/resources/testharnessreport.js"></script>
    <script nonce='abc'>
        setup({ single_test: true });
        window.addEventListener('securitypolicyviolation', function(e) {
            assert_unreached("Should not have fired event");
        });
    </script>

    <script>done();</script>
    </head>

    <body>
    <div id="log"></div>
    </body>
</html>