| Index: LayoutTests/http/tests/security/subresourceIntegrity/subresource-integrity-fetch.html
|
| diff --git a/LayoutTests/http/tests/security/subresourceIntegrity/subresource-integrity-fetch.html b/LayoutTests/http/tests/security/subresourceIntegrity/subresource-integrity-fetch.html
|
| new file mode 100644
|
| index 0000000000000000000000000000000000000000..623b11bdf0bea6ab4c0d20a835d061ada812f0c3
|
| --- /dev/null
|
| +++ b/LayoutTests/http/tests/security/subresourceIntegrity/subresource-integrity-fetch.html
|
| @@ -0,0 +1,49 @@
|
| +<!DOCTYPE html>
|
| +<html>
|
| +<head>
|
| +<title>Tests integrity enforcement on fetch()</title>
|
| +<script src="/resources/testharness.js"></script>
|
| +<script src="/resources/testharnessreport.js"></script>
|
| +</head>
|
| +<body>
|
| +<script>
|
| +var SRITest = function(pass, name, src, integrity, expectedValue) {
|
| + this.pass = pass;
|
| + this.name = name;
|
| + this.src = src;
|
| + this.integrity = integrity;
|
| + this.expectedValue = expectedValue;
|
| +}
|
| +SRITest.prototype.execute = function() {
|
| + var pass = this.pass;
|
| + var src = this.src;
|
| + var integrity = this.integrity;
|
| + var expectedValue = this.expectedValue;
|
| + var options = {};
|
| + if (integrity !== '') {
|
| + options.integrity = integrity;
|
| + }
|
| + promise_test(function() {
|
| + return fetch(src, options)
|
| + .then(function(response) {
|
| + assert_true(pass, "Response should resolve");
|
| +
|
| + if (expectedValue) {
|
| + return response.text().then(function(actualValue) {
|
| + assert_equals(actualValue, expectedValue, "Value consumed must match hashed value.");
|
| + });
|
| + }
|
| + }, function() {
|
| + assert_false(pass, "Response should be rejected");
|
| + })
|
| + }, this.name);
|
| +}
|
| +
|
| +new SRITest(true, 'No integrity', 'call-success.js', '', 'success();\n').execute();
|
| +new SRITest(true, 'Good integrity', 'call-success.js', 'sha256-B0/62fJSJFrdjEFR9ba04m/D+LHQ+zG6PGcaR0Trpxg=', 'success();\n').execute();
|
| +new SRITest(false, 'Bad integrity', 'call-success.js', 'sha256-deadbeef').execute();
|
| +new SRITest(false, 'Bad integrity and an img', '/resources/square100.png', 'sha256-B0/62fJSJFrdjEFR9ba04m/D+LHQ+zG6PGcaR0Trpxg=').execute();
|
| +new SRITest(true, 'Good integrity and an img', '/resources/square100.png', 'sha256-xZjdcorjj+TiKGteFFcrNbdqrDns2iVURBpGpAwp12k=').execute();
|
| +</script>
|
| +</body>
|
| +</html>
|
|
|
Chromium Code Reviews
Issue 1279163005:
Initial Fetch integration for Subresource Integrity (Closed)
Base URL: https://chromium.googlesource.com/chromium/blink.git@master