Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(14)

Side by Side Diff: third_party/WebKit/LayoutTests/http/tests/security/contentTypeOptions/block-video-as-script.html

Issue 2294283002: Stop sniffing 'audio/', 'video/', and 'text/csv' into script. (Closed)
Patch Set: rebase Created 4 years, 3 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
(Empty)
1 <!DOCTYPE html>
2 <head>
3 <title>Block 'video/*' when served as script.</title>
4 <script src="/resources/testharness.js"></script>
5 <script src="/resources/testharnessreport.js"></script>
6 <script>
7 window.scriptsSuccessfullyLoaded = 0;
8 </script>
9 </head>
10 <body>
11 <script src="resources/script-with-header.pl?mime=video/avi&amp;options=inva lid"></script>
12 <script src="resources/script-with-header.pl?mime=ViDeO/fli&amp;options=inva lid"></script>
13 <script src="resources/script-with-header.pl?mime=video/x-motion-jpeg&amp;op tions=invalid"></script>
14 <script src="resources/script-with-header.pl?mime=video/whatever+xml&amp;opt ions=invalid"></script>
15 <script>
16 test(function () {
17 assert_equals(window.scriptsSuccessfullyLoaded, 0);
18 }, "All video/* scripts should be blocked.");
19 </script>
20 </body>
21 </html>
22
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698