Chromium Code Reviews Chromium Code Reviews
Issue 2370783002:
Adding CSP attribute on HTMLIFrameElement (Closed)
| Index: third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/embeddedEnforcement/iframe-csp-attribute.html |
| diff --git a/third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/embeddedEnforcement/iframe-csp-attribute.html b/third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/embeddedEnforcement/iframe-csp-attribute.html |
| new file mode 100644 |
| index 0000000000000000000000000000000000000000..03696c3a071dcd4af2404bbba573bb7365378f31 |
| --- /dev/null |
| +++ b/third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/embeddedEnforcement/iframe-csp-attribute.html |
| @@ -0,0 +1,36 @@ |
| +<!DOCTYPE html> |
| +<html> |
| +<head> |
| + <script src="/resources/testharness.js"></script> |
| + <script src="/resources/testharnessreport.js"></script> |
| +</head> |
| +<body> |
| + <script> |
| + test(t => { |
| + var i = document.createElement('iframe'); |
| + assert_equals('', i.csp); |
| + assert_true('csp' in i); |
| + assert_equals('string', typeof (i.csp)); |
|
Mike West
2016/09/27 07:54:21
Nit: I don't think you need `()` here.
|
| + }, "<iframe> has a 'csp' attibute which is an empty string if undefined."); |
| + |
| + test(t => { |
| + var i = document.createElement('iframe'); |
| + i.setAttribute('csp', 123456); |
| + assert_equals('123456', i.csp); |
| + }, "<iframe>'s csp attribute is always a string."); |
| + |
| + test(t => { |
| + var i = document.createElement('iframe'); |
| + i.csp = 'value'; |
| + assert_equals('value', i.getAttribute('csp')); |
| + }, "<iframe>'s 'csp' content attribute reflects the IDL attribute."); |
| + |
| + test(t => { |
| + var i = document.createElement('iframe'); |
| + |
|
Mike West
2016/09/27 07:54:22
Nit: You don't have this newline in any other test
|
| + i.setAttribute('csp', 'value'); |
| + assert_equals('value', i.csp); |
| + }, "<iframe>'s IDL attribute reflects the DOM attribute."); |
| + </script> |
| +</body> |
| +</html> |
