third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/1.1/base-uri-deny.html - Issue 2447003002: CSP: 'violated-directive' should match 'effective-directive'.

Side by Side Diff

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Keyboard Shortcuts

	File
u :	up to issue
j / k :	jump to file after / before current file
J / K :	jump to next file with a comment after / before current file
	Side-by-side diff
i :	toggle intra-line diffs
e :	expand all comments
c :	collapse all comments
s :	toggle showing all comments
n / p :	next / previous diff chunk or comment
N / P :	next / previous comment
<Up> / <Down> :	next / previous line

	Issue
u :	up to list of issues
j / k :	jump to patch after / before current patch
o / <Enter> :	open current patch in side-by-side view
i :	open current patch in unified diff view

	Issue List
j / k :	jump to issue after / before current issue
o / <Enter> :	open current issue

Side by Side Diff: third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/1.1/base-uri-deny.html

Issue 2447003002: CSP: 'violated-directive' should match 'effective-directive'. (Closed)

Patch Set: Created 4 years, 1 month ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View unified diff | Download patch

OLD	NEW
1 <!DOCTYPE html>	1 <!DOCTYPE html>

2 <html>	2 <html>

3 <head>	3 <head>

4 <meta http-equiv="Content-Security-Policy" content="base-uri 'self'">	4 <meta http-equiv="Content-Security-Policy" content="base-uri 'self'">

5 <script src="http://localhost:8000/js-test-resources/js-test.js"></script>	5 <script src="http://localhost:8000/js-test-resources/js-test.js"></script>

6 <script src="http://localhost:8000/security/contentSecurityPolicy/resources/ securitypolicyviolation-test.js"></script>	6 <script src="http://localhost:8000/security/contentSecurityPolicy/resources/ securitypolicyviolation-test.js"></script>

7 <script>	7 <script>

8 description('Check that base URIs cannot be set if they violate the page \'s policy.');	8 description('Check that base URIs cannot be set if they violate the page \'s policy.');

9	9

10 var expectations = {	10 var expectations = {

11 'documentURI': document.location.toString(),	11 'documentURI': document.location.toString(),

12 'referrer': document.referrer,	12 'referrer': document.referrer,

13 'blockedURI': 'http://example.com/base',	13 'blockedURI': 'http://example.com/base',

14 'violatedDirective': 'base-uri \'self\'',	14 'violatedDirective': 'base-uri',

15 'effectiveDirective': 'base-uri',	15 'effectiveDirective': 'base-uri',

16 'originalPolicy': 'base-uri \'self\'',	16 'originalPolicy': 'base-uri \'self\'',

17 'sourceFile': document.location.toString(),	17 'sourceFile': document.location.toString(),

18 'lineNumber': 24	18 'lineNumber': 24

19 };	19 };

20	20

21 function run() {	21 function run() {

22 var base = document.createElement('base');	22 var base = document.createElement('base');

23 base.href = 'http://example.com/base';	23 base.href = 'http://example.com/base';

24 document.head.appendChild(base);	24 document.head.appendChild(base);

25	25

26 shouldBe('document.baseURI', 'document.location.href');	26 shouldBe('document.baseURI', 'document.location.href');

27 }	27 }

28 </script>	28 </script>

29 </head>	29 </head>

30 <body>	30 <body>

31 </body>	31 </body>

32 </html>	32 </html>

OLD	NEW