| OLD | NEW |
| 1 CONSOLE MESSAGE: The 'allow' directive has been replaced with 'default-src'. Ple
ase use that directive instead, as 'allow' has no effect. | 1 CONSOLE ERROR: The 'allow' directive has been replaced with 'default-src'. Pleas
e use that directive instead, as 'allow' has no effect. |
| 2 CONSOLE MESSAGE: The 'options' directive has been replaced with 'unsafe-inline'
and 'unsafe-eval' source expressions for the 'script-src' and 'style-src' direct
ives. Please use those directives instead, as 'options' has no effect. | 2 CONSOLE ERROR: The 'options' directive has been replaced with 'unsafe-inline' an
d 'unsafe-eval' source expressions for the 'script-src' and 'style-src' directiv
es. Please use those directives instead, as 'options' has no effect. |
| 3 CONSOLE MESSAGE: The 'policy-uri' directive has been removed from the specificat
ion. Please specify a complete policy via the Content-Security-Policy header. | 3 CONSOLE ERROR: The 'policy-uri' directive has been removed from the specificatio
n. Please specify a complete policy via the Content-Security-Policy header. |
| 4 Test that directives that predate the CSP 1.0 standard generate proper warnings
to set developer expectations correctly. | 4 Test that directives that predate the CSP 1.0 standard generate proper warnings
to set developer expectations correctly. |
| 5 | 5 |
| 6 | 6 |
| 7 | 7 |
| 8 -------- | 8 -------- |
| 9 Frame: '<!--framePath //<!--frame0-->-->' | 9 Frame: '<!--framePath //<!--frame0-->-->' |
| 10 -------- | 10 -------- |
| 11 PASS | 11 PASS |
| 12 | 12 |
| 13 -------- | 13 -------- |
| 14 Frame: '<!--framePath //<!--frame1-->-->' | 14 Frame: '<!--framePath //<!--frame1-->-->' |
| 15 -------- | 15 -------- |
| 16 PASS | 16 PASS |
| 17 | 17 |
| 18 -------- | 18 -------- |
| 19 Frame: '<!--framePath //<!--frame2-->-->' | 19 Frame: '<!--framePath //<!--frame2-->-->' |
| 20 -------- | 20 -------- |
| 21 PASS | 21 PASS |
| OLD | NEW |