OLD | NEW |
(Empty) | |
| 1 def main(request, response): |
| 2 headers = [("Content-Type", "text/html")] |
| 3 if "policy" in request.GET: |
| 4 headers.append(("Content-Security-Policy", request.GET["policy"])) |
| 5 if "policy2" in request.GET: |
| 6 headers.append(("Content-Security-Policy", request.GET["policy2"])) |
| 7 if "policy3" in request.GET: |
| 8 headers.append(("Content-Security-Policy", request.GET["policy3"])) |
| 9 message = request.GET["id"] |
| 10 return headers, ''' |
| 11 <!DOCTYPE html> |
| 12 <html> |
| 13 <head> |
| 14 <title>This page sets given CSP upon itself.</title> |
| 15 </head> |
| 16 <body> |
| 17 <script nonce="abc"> |
| 18 var response = {}; |
| 19 response["id"] = "%s"; |
| 20 response["loaded"] = true; |
| 21 window.top.postMessage(response, '*'); |
| 22 </script> |
| 23 </body> |
| 24 </html> |
| 25 ''' % (message) |
OLD | NEW |