Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(39)

Unified Diff: LayoutTests/http/tests/htmlimports/csp-block-import-non-self.html

Issue 19940002: [HTML Import] Respect Content Security Policy Model (Closed) Base URL: svn://svn.chromium.org/blink/trunk
Patch Set: Fix Mac build failure Created 7 years, 5 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: LayoutTests/http/tests/htmlimports/csp-block-import-non-self.html
diff --git a/LayoutTests/http/tests/htmlimports/csp-block-import-non-self.html b/LayoutTests/http/tests/htmlimports/csp-block-import-non-self.html
new file mode 100644
index 0000000000000000000000000000000000000000..9ebb01170295b8153f9aa3bbe8eb7497e991afb4
--- /dev/null
+++ b/LayoutTests/http/tests/htmlimports/csp-block-import-non-self.html
@@ -0,0 +1,25 @@
+<!DOCTYPE html>
+<html>
+<head>
+<meta http-equiv="Content-Security-Policy" content="script-src 'self' 'unsafe-inline'">
+<link id="selfImport" rel="import" href="resources/hello.html">
+<link id="nonSelfImport" rel="import" href="http://localhost:8080/htmlimports/resources/cors-basic.cgi">
+</head>
+<body>
+<pre id="result"></pre>
+<script>
+if (window.testRunner)
+ testRunner.dumpAsText();
+
+if (window.selfImport.import != null)
+ result.innerHTML += "PASS\n";
+else
+ result.innerHTML += "FAIL: The import should be allowed.\n";
+
+if (window.nonSelfImport.import == null)
+ result.innerHTML += "PASS\n";
+else
+ result.innerHTML += "FAIL: The import should be blocked.\n";
+</script>
+</body>
+</html>

Powered by Google App Engine
This is Rietveld 408576698