Experimental Feature: Allow-CSP-From header

third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/resources/child-src-test.js

 var EXPECT_BLOCK = true;
 var EXPECT_LOAD = false;
 
+var SAME_ORIGIN = true;
+var CROSS_ORIGIN = false;
+
 window.jsTestIsAsync = true;
 window.wasPostTestScriptParsed = true;
 
 var iframe;
 function injectFrame(url, shouldBlock) {
     window.onload = function () {
         iframe = document.createElement('iframe');
         iframe.onload = iframeLoaded(shouldBlock);
         iframe.src = url;
         document.body.appendChild(iframe);
@@ skipping 42 matching lines @@
 
 function injectSharedWorker(url, expectBlock) {
     window.onload = function() {
         if (expectBlock == EXPECT_BLOCK)
             shouldThrow("var w = new SharedWorker('" + url + "');");
         else
             shouldNotThrow("var w = new SharedWorker('" + url + "');");
         finishJSTest();
     };
 }
+
+function injectFrameWithCSP(url, csp, shouldBlock, sameOrigin) {
+    window.onload = function () {
+        iframe = document.createElement('iframe');
+        if (shouldBlock == EXPECT_LOAD && sameOrigin == CROSS_ORIGIN) {
+            window.addEventListener("message", function (e) {
+                if (e.source != iframe.contentWindow) {
+                    return;
+                }
+                if (e.data != 'loaded')
+                    testFailed("The inner IFrame failed.");
+                else
+                    testPassed("The inner IFrame passed.");
+
+                finishJSTest();
+            });
+        } else {
+            iframe.onload = iframeLoaded(shouldBlock);
+        }
+        iframe.src = url;
+        iframe.csp = csp;
+        document.body.appendChild(iframe);
+    };
+}