LayoutTests/http/tests/security/contentSecurityPolicy/1.1/scriptnonce-basic-blocked.html - Issue 14949017: Implementation of W3C compliant CSP script-src nonce.

Side by Side Diff

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Keyboard Shortcuts

	File
u :	up to issue
j / k :	jump to file after / before current file
J / K :	jump to next file with a comment after / before current file
	Side-by-side diff
i :	toggle intra-line diffs
e :	expand all comments
c :	collapse all comments
s :	toggle showing all comments
n / p :	next / previous diff chunk or comment
N / P :	next / previous comment
<Up> / <Down> :	next / previous line

	Issue
u :	up to list of issues
j / k :	jump to patch after / before current patch
o / <Enter> :	open current patch in side-by-side view
i :	open current patch in unified diff view

	Issue List
j / k :	jump to issue after / before current issue
o / <Enter> :	open current issue

Side by Side Diff: LayoutTests/http/tests/security/contentSecurityPolicy/1.1/scriptnonce-basic-blocked.html

Issue 14949017: Implementation of W3C compliant CSP script-src nonce. (Closed) Base URL: https://chromium.googlesource.com/chromium/blink.git@master

Patch Set: Factored script nonce checks to point of resource request creation, plus nits from Adam Created 7 years, 7 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View unified diff | Download patch

« no previous file with comments | « LayoutTests/http/tests/security/contentSecurityPolicy/1.1/scriptnonce-allowed.html ('k') | LayoutTests/http/tests/security/contentSecurityPolicy/1.1/scriptnonce-basic-blocked-expected.txt » ('j') | Source/core/dom/ScriptElement.cpp » ('J')
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Hide Comments ('s')

OLD	NEW
1 <!DOCTYPE html>	1 <!DOCTYPE html>

2 <html>	2 <html>

3 <head>	3 <head>

4 <meta http-equiv="Content-Security-Policy" content="script-nonce noncyno nce;">	4 <meta http-equiv="Content-Security-Policy" content="script-src 'nonce-no ncynonce'">

5 <script nonce="noncynonce">	5 <script nonce="noncynonce">

6 if (window.testRunner)	6 if (window.testRunner)

7 testRunner.dumpAsText();	7 testRunner.dumpAsText();

8 alert('PASS (1/2)');	8 alert('PASS (1/2)');

9 </script>	9 </script>

10 <script nonce=" noncynonce ">	10 <script nonce=" noncynonce ">

11 alert('PASS (2/2)');	11 alert('PASS (2/2)');

12 </script>	12 </script>

13 <script nonce="noncynonce noncynonce">	13 <script nonce="noncynonce noncynonce">

14 alert('FAIL (1/3)');	14 alert('FAIL (1/3)');

15 </script>	15 </script>

16 <script>	16 <script>

17 alert('FAIL (2/3)');	17 alert('FAIL (2/3)');

18 </script>	18 </script>

19 <script nonce="noncynonceno?">	19 <script nonce="noncynonceno?">

20 alert('FAIL (3/3)');	20 alert('FAIL (3/3)');

21 </script>	21 </script>

22 </head>	22 </head>

23 <body>	23 <body>

24 <p>	24 <p>

25 This tests the effect of a valid script-nonce value. It passes if	25 This tests the effect of a valid script-nonce value. It passes if

26 three console warnings are visible, and the two PASS alerts are	26 three console warnings are visible, and the two PASS alerts are

27 executed.	27 executed.

28 </p>	28 </p>

29 </body>	29 </body>

30 </html>	30 </html>

OLD	NEW