Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(107)

Side by Side Diff: LayoutTests/http/tests/security/subresourceIntegrity/subresource-integrity-script-no-cors-no-xorigin-with-creds.html

Issue 1166003004: SRI fail open on ineligible resources. (Closed) Base URL: https://chromium.googlesource.com/chromium/blink.git@master
Patch Set: Remove a bunch of -expected.txt files Created 5 years, 6 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
1 <!DOCTYPE html> 1 <!DOCTYPE html>
2 <head> 2 <head>
3 <title>SRI on cross origin CORS disabled but with credentials script, withou t CORS fetch</title> 3 <title>SRI on cross origin CORS disabled but with credentials script, withou t CORS fetch</title>
4 </head> 4 </head>
5 <body> 5 <body>
6 <script src="/resources/testharness.js"></script> 6 <script src="/resources/testharness.js"></script>
7 <script src="/resources/testharnessreport.js"></script> 7 <script src="/resources/testharnessreport.js"></script>
8 <script> 8 <script>
9 var result = ''; 9 var result = '';
10 var scriptLoaded = function() { 10 var scriptLoaded = function() {
11 assert_unreached('Script ran.'); 11 assert_equals(result, 'ran', 'Script ran.');
12 done(); 12 done();
13 }; 13 };
14 var scriptError = function() { 14 var scriptError = function() {
15 assert_equals(result, '', 'Script did not run.'); 15 assert_unreached('Script did not run.');
16 done(); 16 done();
17 }; 17 };
18 </script> 18 </script>
19 </script> 19 </script>
20 <script integrity="sha256-mk_DwEwGGoyrh4sgi9t0nYTO1Lrft3w6vzaNuMaZrtQ=" src= "http://localhost:8000/security/resources/cors-script.php?credentials=true&cors= false&value=ran" onload="scriptLoaded();" onerror="scriptError()"></script> 20 <script integrity="sha256-mk_DwEwGGoyrh4sgi9t0nYTO1Lrft3w6vzaNuMaZrtQ=" src= "http://localhost:8000/security/resources/cors-script.php?credentials=true&cors= false&value=ran" onload="scriptLoaded();" onerror="scriptError()"></script>
21 </body> 21 </body>
22 </html> 22 </html>
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698