Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(334)

Unified Diff: third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/worker-src/dedicated-fallback.html

Issue 2533313002: CSP: Move 'worker-src' onto 'script-src' (Closed)
Patch Set: Created 4 years, 1 month ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/worker-src/dedicated-fallback.html
diff --git a/third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/worker-src/dedicated-fallback.html b/third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/worker-src/dedicated-fallback.html
index 6de198568b8efee3462257abcfe3c98f0cd8f273..c2226409731ff2547f500d32e04126313c64c9a5 100644
--- a/third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/worker-src/dedicated-fallback.html
+++ b/third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/worker-src/dedicated-fallback.html
@@ -1,8 +1,8 @@
<!DOCTYPE html>
-<script src="/resources/testharness.js"></script>
-<script src="/resources/testharnessreport.js"></script>
-<script src="../resources/testharness-helper.js"></script>
-<meta http-equiv="Content-Security-Policy" content="worker-src http://127.0.0.1:8000 blob:; child-src 'none'">
+<script src="http://example.test:8000/resources/testharness.js"></script>
+<script src="http://example.test:8000/resources/testharnessreport.js"></script>
+<script src="http://example.test:8000/security/contentSecurityPolicy/resources/testharness-helper.js"></script>
+<meta http-equiv="Content-Security-Policy" content="worker-src http://127.0.0.1:8000 blob:; script-src 'unsafe-inline' 'http://example.test:8000'">
estark 2016/11/29 22:01:16 No quotes around the URL
Mike West 2016/11/30 12:34:30 And that explains why the test is failing... Good
<script>
var url = new URL("/security/contentSecurityPolicy/resources/ping.js", document.baseURI).toString();
assert_worker_is_loaded(url, "Same-origin dedicated worker allowed by host-source expression.");

Powered by Google App Engine
This is Rietveld 408576698