| Index: third_party/WebKit/LayoutTests/http/tests/security/isolatedWorld/no-bypass-main-world-csp-for-delayed-execution-expected.txt
|
| diff --git a/third_party/WebKit/LayoutTests/http/tests/security/isolatedWorld/no-bypass-main-world-csp-for-delayed-execution-expected.txt b/third_party/WebKit/LayoutTests/http/tests/security/isolatedWorld/no-bypass-main-world-csp-for-delayed-execution-expected.txt
|
| index b5372d04939a5e720055b06a33bbff5efafdc975..5ec64904046553a58f87a1702b51ca5ff4534033 100644
|
| --- a/third_party/WebKit/LayoutTests/http/tests/security/isolatedWorld/no-bypass-main-world-csp-for-delayed-execution-expected.txt
|
| +++ b/third_party/WebKit/LayoutTests/http/tests/security/isolatedWorld/no-bypass-main-world-csp-for-delayed-execution-expected.txt
|
| @@ -2,7 +2,7 @@ ALERT: PASS: Case 3 was not blocked by a CSP.
|
| CONSOLE MESSAGE: line 1: EvalError: Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "script-src 'self'".
|
|
|
| ALERT: PASS: Case 2 was blocked by a CSP.
|
| -CONSOLE ERROR: line 1: Refused to execute inline event handler because it violates the following Content Security Policy directive: "script-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-...'), or a nonce ('nonce-...') is required to enable inline execution.
|
| +CONSOLE ERROR: line 45: Refused to execute inline event handler because it violates the following Content Security Policy directive: "script-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-...'), or a nonce ('nonce-...') is required to enable inline execution.
|
|
|
| ALERT: PASS: Case 1 was blocked by a CSP.
|
| Test a script that bypasses the main world's CSP to see if its *content* bypasses the main world as well (it should not).
|
|
|