Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(214)

Unified Diff: LayoutTests/http/tests/security/contentSecurityPolicy/default-src-inline-blocked-expected.txt

Issue 137233005: CSP: Improve blocked inline script error message. (Closed) Base URL: svn://svn.chromium.org/blink/trunk
Patch Set: Yay. Created 6 years, 11 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: LayoutTests/http/tests/security/contentSecurityPolicy/default-src-inline-blocked-expected.txt
diff --git a/LayoutTests/http/tests/security/contentSecurityPolicy/default-src-inline-blocked-expected.txt b/LayoutTests/http/tests/security/contentSecurityPolicy/default-src-inline-blocked-expected.txt
index bb842298975c1cec0f0ffeb234ebd53bb654451c..e5510fddfa3384b83e8e433e95874ba243814da7 100644
--- a/LayoutTests/http/tests/security/contentSecurityPolicy/default-src-inline-blocked-expected.txt
+++ b/LayoutTests/http/tests/security/contentSecurityPolicy/default-src-inline-blocked-expected.txt
@@ -1,5 +1,5 @@
-CONSOLE ERROR: line 9: Refused to execute inline script because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'script-src' was not explicitly set, so 'default-src' is used as a fallback.
+CONSOLE ERROR: line 9: Refused to execute inline script because it violates the following Content Security Policy directive: "default-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-...'), or a nonce ('nonce-...') is required to enable inline execution. Note also that 'script-src' was not explicitly set, so 'default-src' is used as a fallback.
-CONSOLE ERROR: Refused to execute inline script because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'script-src' was not explicitly set, so 'default-src' is used as a fallback.
+CONSOLE ERROR: Refused to execute inline script because it violates the following Content Security Policy directive: "default-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-...'), or a nonce ('nonce-...') is required to enable inline execution. Note also that 'script-src' was not explicitly set, so 'default-src' is used as a fallback.
This test passes if it doesn't alert fail.

Powered by Google App Engine
This is Rietveld 408576698