'Test case in witch site provide CSP features and enable unsafe inline
script + use of the javascript "eval()" function into is CSP Script
policies BUT we accept theses configurations.'

def test_site_protected_against_xss_by_csp_case05(self):

    header_value = "script-src    'self'    unsafe-eval    unsafe-inline;    script-nonce    'AADD'"
    hrds = {CSP_HEADER_W3C: header_value}.items()
    csp_headers = Headers(hrds)
    http_response = HTTPResponse(200, '', csp_headers, self.url, self.url)
    site_protected = site_protected_against_xss_by_csp(http_response, True, True)
    self.assertTrue(site_protected)
