| Index: third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/resources/respond-with-multiple-csp-headers.php
|
| diff --git a/third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/resources/respond-with-multiple-csp-headers.php b/third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/resources/respond-with-multiple-csp-headers.php
|
| new file mode 100644
|
| index 0000000000000000000000000000000000000000..8527294a048e5812a3808f64c47644840f30c861
|
| --- /dev/null
|
| +++ b/third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/resources/respond-with-multiple-csp-headers.php
|
| @@ -0,0 +1,40 @@
|
| +<?php
|
| + $csp = isset($_GET['csp']) ? $_GET['csp'] : null;
|
| + if ($csp)
|
| + header('Content-Security-Policy: ' . $csp);
|
| + $csp2 = isset($_GET['csp2']) ? $_GET['csp2'] : null;
|
| + if ($csp2)
|
| + header('Content-Security-Policy: ' . $csp2);
|
| + $csp_report_only = isset($_GET['csp_report_only']) ? $_GET['csp_report_only'] : null;
|
| + if ($csp_report_only)
|
| + header('Content-Security-Policy-Report-Only: ' . $csp_report_only);
|
| + $msg = isset($_GET['id']) ? $_GET['id'] : null;
|
| +?>
|
| +
|
| +<!DOCTYPE html>
|
| +<html>
|
| +<head>
|
| + <title>This page enforces embedder's policies</title>
|
| + <script nonce="123">
|
| + document.addEventListener("securitypolicyviolation", function(e) {
|
| + var response = {};
|
| + response["id"] = "<?php echo $msg; ?>";
|
| + response["securitypolicyviolation"] = true;
|
| + response["blockedURI"] = e.blockedURI;
|
| + response["lineNumber"] = e.lineNumber;
|
| + window.top.postMessage(response, '*');
|
| + });
|
| + </script>
|
| +</head>
|
| +<body>
|
| + Hello World.
|
| + <iframe src="/cross-site/b.com/title2.html"></iframe>
|
| + <img src="green250x50.png" />
|
| + <script nonce="abc">
|
| + var response = {};
|
| + response["loaded"] = true;
|
| + response["id"] = "<?php echo $msg; ?>";
|
| + window.onload = window.top.postMessage(response, '*');
|
| + </script>
|
| +</body>
|
| +</html>
|
|
|
Chromium Code Reviews
Issue 2526473005:
Part 4.1: Is policy list subsumed under subsuming policy? (Closed)
