Carlos Ilabaca developed and integrated Content Security Policy Eval Hash Handling Tests for the mozilla/gecko-dev repository, focusing on enhancing the reliability and coverage of CSP enforcement. He implemented hash-based evaluation logic in JavaScript and HTML, allowing scripts with specific eval hashes to be permitted while ensuring that unsafe-eval is blocked when hashes are present. By expanding the Web Platform Testing suite, Carlos enabled earlier detection of policy regressions in continuous integration workflows. His work addressed CSP parsing improvements linked to Bug 1973793, demonstrating a methodical approach to security-focused test automation and clear traceability from code changes to policy behavior.