'Test case in witch site provide CSP features and enable use of the
javascript "eval()" function into is CSP Script policies BUT we do not
accept theses configurations.'

def test_site_protected_against_xss_by_csp_case04(self):

    header_value = "script-src    'self'    unsafe-eval;    script-nonce    'AADD'"
    hrds = {CSP_HEADER_W3C: header_value}.items()
    csp_headers = Headers(hrds)
    http_response = HTTPResponse(200, '', csp_headers, self.url, self.url)
    site_protected = site_protected_against_xss_by_csp(http_response)
    self.assertFalse(site_protected)
