Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(87)

Unified Diff: third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/script-src-unsafe-dynamic-whitelist.html

Issue 2082613002: Rename 'unsafe-dynamic' to 'strict-dynamic' (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Created 4 years, 6 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/script-src-unsafe-dynamic-whitelist.html
diff --git a/third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/script-src-unsafe-dynamic-whitelist.html b/third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/script-src-unsafe-dynamic-whitelist.html
deleted file mode 100644
index 0e1176f4efdc8996cfeaaa0f95c5023d75b0ddac..0000000000000000000000000000000000000000
--- a/third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/script-src-unsafe-dynamic-whitelist.html
+++ /dev/null
@@ -1,48 +0,0 @@
-<!DOCTYPE html>
-<html>
-<head>
- <meta http-equiv="Content-Security-Policy" content="script-src 'nonce-abcdefg' 'unsafe-dynamic' http://localhost:8000">
- <script src="/resources/testharness.js" nonce="abcdefg"></script>
- <script src="/resources/testharnessreport.js" nonce="abcdefg"></script>
-</head>
-<body>
- <script nonce="abcdefg">
- function generateURL(type) {
- return 'http://localhost:8000/security/contentSecurityPolicy/resources/loaded.js?' + type;
- }
-
- var loaded = {};
- var blocked = {};
- window.addEventListener("message", function (e) {
- loaded[e.data] = true;
- });
- document.addEventListener("securitypolicyviolation", function (e) {
- blocked[e.lineNumber] = true;
- });
-
- async_test(function (t) {
- document.write("<scr" + "ipt src='" + generateURL("write") + "'></scr" + "ipt>");
- setTimeout(t.step_func_done(function () {
- assert_equals(loaded[generateURL("write")], undefined);
- assert_true(blocked[24]);
- }, 1));
- }, "Script injected via 'document.write' is not allowed with 'unsafe-dynamic', even if whitelisted.");
-
- async_test(function (t) {
- document.write("<scr" + "ipt defer src='" + generateURL("write-defer") + "'></scr" + "ipt>");
- setTimeout(t.step_func_done(function () {
- assert_equals(loaded[generateURL("write-defer")], undefined);
- assert_true(blocked[32]);
- }, 1));
- }, "Deferred script injected via 'document.write' is not allowed with 'unsafe-dynamic', even if whitelisted.");
-
- async_test(function (t) {
- document.write("<scr" + "ipt async src='" + generateURL("write-async") + "'></scr" + "ipt>");
- setTimeout(t.step_func_done(function () {
- assert_equals(loaded[generateURL("write-async")], undefined);
- assert_true(blocked[40]);
- }, 1));
- }, "Async script injected via 'document.write' is not allowed with 'unsafe-dynamic', even if whitelisted.");
- </script>
-</body>
-</html>

Powered by Google App Engine
This is Rietveld 408576698