Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(137)

Unified Diff: LayoutTests/http/tests/security/subresourceIntegrity/subresource-integrity-script-no-cors-no-xorigin-expected.txt

Issue 1166003004: SRI fail open on ineligible resources. (Closed) Base URL: https://chromium.googlesource.com/chromium/blink.git@master
Patch Set: Created 5 years, 6 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: LayoutTests/http/tests/security/subresourceIntegrity/subresource-integrity-script-no-cors-no-xorigin-expected.txt
diff --git a/LayoutTests/http/tests/security/subresourceIntegrity/subresource-integrity-script-no-cors-no-xorigin-expected.txt b/LayoutTests/http/tests/security/subresourceIntegrity/subresource-integrity-script-no-cors-no-xorigin-expected.txt
index 7a1781dbaf427f89e8c79026a2e9029a7a11235e..8ef7014986371e484b5b18ea571ed9b1ca6b5174 100644
--- a/LayoutTests/http/tests/security/subresourceIntegrity/subresource-integrity-script-no-cors-no-xorigin-expected.txt
+++ b/LayoutTests/http/tests/security/subresourceIntegrity/subresource-integrity-script-no-cors-no-xorigin-expected.txt
@@ -1,4 +1,4 @@
-CONSOLE ERROR: Subresource Integrity: The resource 'http://localhost:8000/security/resources/cors-script.php?cors=false&value=ran' has an integrity attribute, but the resource requires CORS to be enabled to check the integrity, and it is not. The resource has been blocked.
+CONSOLE ERROR: Subresource Integrity: The resource 'http://localhost:8000/security/resources/cors-script.php?cors=false&value=ran' has an integrity attribute, but the resource requires the request to be CORS enabled to check the integrity, and it is not. The resource has not been blocked, but no integrity check occurred.
This is a testharness.js-based test.
PASS SRI on cross origin CORS disabled script, without CORS fetch
Harness: the test ran to completion.

Powered by Google App Engine
This is Rietveld 408576698