Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(52)

Side by Side Diff: third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/object-src-does-not-affect-child.html

Issue 2472333003: CSP: "local schemes" should inherit policy when embedded. (Closed)
Patch Set: dcheng@ Created 4 years ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
1 <!DOCTYPE html> 1 <!DOCTYPE html>
2 <html> 2 <html>
3 <head> 3 <head>
4 <meta http-equiv="Content-Security-Policy" content="object-src 'none'"> 4 <meta http-equiv="Content-Security-Policy" content="object-src 'none'">
5 <script src="resources/dump-as-text.js"></script> 5 <script src="resources/dump-as-text.js"></script>
6 </head> 6 </head>
7 <body> 7 <body>
8 <p> 8 <p>
9 This tests that an object-src directive on a top-level page is not 9 This tests that an object-src directive on a top-level page is not
10 inherited by a PluginDocument embedded in an iframe on the 10 inherited by a PluginDocument embedded in an iframe on the
11 page. This test passes if the plugin logs a message that it loaded. 11 page. This test passes if the plugin logs a message that it loaded.
12 </p> 12 </p>
13 <iframe src="data:application/x-blink-test-plugin,"></iframe> 13 <iframe src="/plugins/resources/mock-plugin.pl"></iframe>
14 </body> 14 </body>
15 </html> 15 </html>
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698