third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/1.1/form-action-src-default-ignored-with-redirect.html - Issue 2689653003: PlzNavigate: Enforce 'form-action' CSP on the browser-side.

Unified Diff: third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/1.1/form-action-src-default-ignored-with-redirect.html

Issue 2689653003: PlzNavigate: Enforce 'form-action' CSP on the browser-side. (Closed)

Patch Set: Add TODO. Created 3 years, 9 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View side-by-side diff with in-line comments

« content/browser/frame_host/navigator_impl.cc ('K') | « third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/1.1/form-action-src-allowed-with-redirect-expected.txt ('k') | third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/1.1/form-action-src-default-ignored-with-redirect-expected.txt » ('j') | third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/1.1/form-action-src-get-allowed-with-redirect.html » ('J')
Expand Comments ('e') | Collapse Comments ('c') | Hide Comments ('s')

Index: third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/1.1/form-action-src-default-ignored-with-redirect.html

diff --git a/third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/1.1/form-action-src-default-ignored-with-redirect.html b/third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/1.1/form-action-src-default-ignored-with-redirect.html

new file mode 100644

index 0000000000000000000000000000000000000000..a774608341173b1138b27e9c481abc571895bcc6

--- /dev/null

+++ b/third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/1.1/form-action-src-default-ignored-with-redirect.html

@@ -0,0 +1,30 @@

+<!DOCTYPE html>

+<html>

+<head>

+<meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src 'unsafe-inline'">

+<script>

+ if (window.testRunner) {

+ testRunner.dumpAsText();

+ testRunner.waitUntilDone();

+ testRunner.clearBackForwardList();

+ testRunner.dumpBackForwardList();

+ }

+ window.addEventListener('load', function() {

+ setTimeout(function() {

+ document.getElementById('submit').click();

+ }, 0);

+ });

+</script>

+</head>

+<body>

+ <form

+ action="/resources/redirection-response.php?status=302&target=/navigation/resources/form-target.pl"

+ id='theform'

+ method='post'>

+ <input type='text' name='fieldname' value='fieldvalue'>

+ <input type='submit' id='submit' value='submit'>

+ </form>

+ <p>Tests that default-src does. If this test passes, you will see a page indicating a form was POSTed.</p>

alexmos 2017/03/16 23:05:36 nit: finish the first sentence (default-src does w

arthursonzogni 2017/03/17 14:58:25 Thanks! I will also fix the initial one.

+</body>

+</html>