Chromium Code Reviews| Index: third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/worker-src/dedicated-none.html |
| diff --git a/third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/worker-src/dedicated-none.html b/third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/worker-src/dedicated-none.html |
| new file mode 100644 |
| index 0000000000000000000000000000000000000000..014c025f88b425c7c7561f130bc986f8de3043cf |
| --- /dev/null |
| +++ b/third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/worker-src/dedicated-none.html |
| @@ -0,0 +1,13 @@ |
| +<!DOCTYPE html> |
| +<script src="/resources/testharness.js"></script> |
| +<script src="/resources/testharnessreport.js"></script> |
| +<script src="../resources/testharness-helper.js"></script> |
| +<meta http-equiv="Content-Security-Policy" content="worker-src 'none'"> |
| +<script> |
| + var url = new URL("/security/contentSecurityPolicy/resources/ping.js", document.baseURI).toString(); |
| + assert_worker_is_blocked(url, "Same-origin dedicated worker allowed by host-source expression."); |
|
estark
2016/11/09 16:48:05
s/allowed/blocked/ (here and line 12)
|
| + |
| + var b = new Blob(["postMessage('ping');"], {type: "text/javascript"}); |
| + var url = URL.createObjectURL(b); |
| + assert_worker_is_blocked(url, "blob: dedicated worker allowed by 'blob:'."); |
| +</script> |