Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(55)

Unified Diff: LayoutTests/http/tests/htmlimports/resources/having-nonce-policy.cgi

Issue 183883004: Let ContentSecurityPolicy shared between imports and the master. (Closed) Base URL: svn://svn.chromium.org/blink/trunk
Patch Set: Adding guardRef()/guardDeref() Created 6 years, 10 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: LayoutTests/http/tests/htmlimports/resources/having-nonce-policy.cgi
diff --git a/LayoutTests/http/tests/htmlimports/resources/having-nonce-policy.cgi b/LayoutTests/http/tests/htmlimports/resources/having-nonce-policy.cgi
new file mode 100755
index 0000000000000000000000000000000000000000..d7854006b8b76e5299975ceb3c9ef109a09a2de8
--- /dev/null
+++ b/LayoutTests/http/tests/htmlimports/resources/having-nonce-policy.cgi
@@ -0,0 +1,25 @@
+#!/usr/bin/perl -wT
+use strict;
+
+print "Content-Type: text/html\n";
+print "Access-Control-Allow-Credentials: true\n";
+print "Access-Control-Allow-Origin: http://127.0.0.1:8000\n\n";
+
+print <<EOF
+<!DOCTYPE html>
+<html>
+<head>
+<script src="http://localhost:8080/htmlimports/resources/external-script.js"></script>
+<script nonce="hello" src="http://localhost:8080/htmlimports/resources/external-script-with-nonce.js"></script>
+<script>
+document.inlineScriptHasRun = true;
+eval("document.evalFromInlineHasRun = true;");
+</script>
+
+<script nonce="hello">
+document.inlineScriptWithNonceHasRun = true;
+eval("document.evalFromInlineWithNonceHasRun = true;");
+</script>
+</head>
+</html>
+EOF

Powered by Google App Engine
This is Rietveld 408576698