Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(270)

Issues Search
    My Issues | Starred     Open | Closed | All

Unified Diff: third_party/WebKit/LayoutTests/http/tests/preload/multiple-meta-csp.html

Issue 2242223003: Preload tokens even if a <meta> csp tag is found (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Added another layout test. Use index into |tokens| in TokenizedChunk Created 4 years, 4 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « third_party/WebKit/LayoutTests/http/tests/preload/meta-csp.html ('k') | third_party/WebKit/Source/core/html/parser/BackgroundHTMLParser.h » ('j') | third_party/WebKit/Source/core/html/parser/BackgroundHTMLParser.h » ('J')
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: third_party/WebKit/LayoutTests/http/tests/preload/multiple-meta-csp.html
diff --git a/third_party/WebKit/LayoutTests/http/tests/preload/multiple-meta-csp.html b/third_party/WebKit/LayoutTests/http/tests/preload/multiple-meta-csp.html
new file mode 100644
index 0000000000000000000000000000000000000000..2ccdb0e807fef5d933c64a476cfc09f2c942d47e
--- /dev/null
+++ b/third_party/WebKit/LayoutTests/http/tests/preload/multiple-meta-csp.html
@@ -0,0 +1,26 @@
+<!DOCTYPE html>
+<meta http-equiv="Content-Security-Policy" content="script-src 'self' 'unsafe-inline'; font-src 'none'">
+<script src="../resources/testharness.js"></script>
+<script src="../resources/testharnessreport.js"></script>
+<link rel=preload href="../resources/Ahem.ttf" as=font crossorigin>
+
+<meta http-equiv="Content-Security-Policy" content="style-src 'none'">
+<link rel="stylesheet" href="../resources/dummy.css" crossorigin>
+
+<meta http-equiv="Content-Security-Policy" content="img-src 'none'">
+<img src="../resources/square.png" crossorigin>
+
+<script>
+var t = async_test("Ensure preloads don't bypass CSP policies when multiple meta tags are in the markup");
+window.addEventListener("load", t.step_func(function() {
+ if (window.internals) {
+ assert_false(internals.isPreloaded('../resources/Ahem.ttf'), "fonts should not be preloaded");
+ assert_false(internals.isPreloaded('../resources/dummy.css'), "css should not be preloaded");
+ assert_false(internals.isPreloaded('../resources/square.png'), "imgs should not be preloaded");
+ assert_true(internals.isPreloaded('../resources/testharness.js'));
+ assert_true(internals.isPreloaded('../resources/testharnessreport.js'));
+ t.done();
+ }
+}));
+</script>
+
« no previous file with comments | « third_party/WebKit/LayoutTests/http/tests/preload/meta-csp.html ('k') | third_party/WebKit/Source/core/html/parser/BackgroundHTMLParser.h » ('j') | third_party/WebKit/Source/core/html/parser/BackgroundHTMLParser.h » ('J')

Powered by Google App Engine
This is Rietveld 408576698