Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(14)

Side by Side Diff: LayoutTests/http/tests/security/contentTypeOptions/nosniff-dynamic-script-blocked-expected.txt

Issue 185593011: Apply 'x-content-type-options' check to dynamically inserted script. (Closed) Base URL: svn://svn.chromium.org/blink/trunk
Patch Set: Test. Created 6 years, 9 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
OLDNEW
1 CONSOLE ERROR: Refused to execute script from 'http://127.0.0.1:8000/security/co ntentTypeOptions/resources/script-with-header.pl' because its MIME type ('text/p lain') is not executable, and strict MIME type checking is enabled. 1 CONSOLE ERROR: Refused to execute script from 'http://127.0.0.1:8000/security/co ntentTypeOptions/resources/script-with-header.pl?mime=application/json' because its MIME type ('application/json') is not executable, and strict MIME type check ing is enabled.
2 Check that script sent with an 'X-Content-Type-Options: nosniff' header is corre ctly blocked if no 'Content-Type' header is present. 2 Check that script sent with an 'X-Content-Type-Options: nosniff' header is corre ctly blocked if the MIME type isn't scripty.
3 3
4 On success, you will see a series of "PASS" messages, followed by "TEST COMPLETE ". 4 On success, you will see a series of "PASS" messages, followed by "TEST COMPLETE ".
5 5
6 6
7 PASS window.scriptsSuccessfullyLoaded is 0 7 PASS window.scriptsSuccessfullyLoaded is 0
8 PASS successfullyParsed is true 8 PASS successfullyParsed is true
9 9
10 TEST COMPLETE 10 TEST COMPLETE
11 11
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698