| Index: third_party/WebKit/LayoutTests/http/tests/security/contentTypeOptions/block-audio-as-script.html
|
| diff --git a/third_party/WebKit/LayoutTests/http/tests/security/contentTypeOptions/block-audio-as-script.html b/third_party/WebKit/LayoutTests/http/tests/security/contentTypeOptions/block-audio-as-script.html
|
| new file mode 100644
|
| index 0000000000000000000000000000000000000000..40929320b3592ab68bd9288b56b4b5424c3ccf74
|
| --- /dev/null
|
| +++ b/third_party/WebKit/LayoutTests/http/tests/security/contentTypeOptions/block-audio-as-script.html
|
| @@ -0,0 +1,23 @@
|
| +<!DOCTYPE html>
|
| +<head>
|
| + <title>Block 'audio/*' when served as script.</title>
|
| + <script src="/resources/testharness.js"></script>
|
| + <script src="/resources/testharnessreport.js"></script>
|
| + <script>
|
| + window.scriptsSuccessfullyLoaded = 0;
|
| + </script>
|
| +</head>
|
| +<body>
|
| + <script src="resources/script-with-header.pl?mime=audio/aiff&options=invalid"></script>
|
| + <script src="resources/script-with-header.pl?mime=AudiO/midi&options=invalid"></script>
|
| + <script src="resources/script-with-header.pl?mime=AUDIO/wav&options=invalid"></script>
|
| + <script src="resources/script-with-header.pl?mime=audio/x-wav&options=invalid"></script>
|
| + <script src="resources/script-with-header.pl?mime=audio/whatever+xml&options=invalid"></script>
|
| + <script>
|
| + test(function () {
|
| + assert_equals(window.scriptsSuccessfullyLoaded, 0);
|
| + }, "All audio/* scripts should be blocked.");
|
| + </script>
|
| +</body>
|
| +</html>
|
| +
|
|
|
Chromium Code Reviews
Issue 2294283002:
Stop sniffing 'audio/', 'video/', and 'text/csv' into script. (Closed)
