Index: third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/worker-src/dedicated-none.html |
diff --git a/third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/worker-src/dedicated-none.html b/third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/worker-src/dedicated-none.html |
new file mode 100644 |
index 0000000000000000000000000000000000000000..33777757016a295e42e8c60f4f3595139412f919 |
--- /dev/null |
+++ b/third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/worker-src/dedicated-none.html |
@@ -0,0 +1,13 @@ |
+<!DOCTYPE html> |
+<script src="/resources/testharness.js"></script> |
+<script src="/resources/testharnessreport.js"></script> |
+<script src="../resources/testharness-helper.js"></script> |
+<meta http-equiv="Content-Security-Policy" content="worker-src 'none'"> |
+<script> |
+ var url = new URL("/security/contentSecurityPolicy/resources/ping.js", document.baseURI).toString(); |
+ assert_worker_is_blocked(url, "Same-origin dedicated worker blocked by host-source expression."); |
+ |
+ var b = new Blob(["postMessage('ping');"], {type: "text/javascript"}); |
+ var url = URL.createObjectURL(b); |
+ assert_worker_is_blocked(url, "blob: dedicated worker blocked by 'blob:'."); |
+</script> |