| OLD | NEW |
|---|
| (Empty) | |
| 1 <!DOCTYPE HTML> |
| 2 <html> |
| 3 <head> |
| 4 <title>default-src should cascade to script-src directive</title> |
| 5 <script src='/resources/testharness.js'></script> |
| 6 <script src='/resources/testharnessreport.js'></script> |
| 7 <script src='../support/siblingPath.js'></script> |
| 8 </head> |
| 9 <body> |
| 10 <h1>default-src should cascade to script-src directive</h1> |
| 11 <div id='log'></div> |
| 12 |
| 13 <script> |
| 14 var scriptsrc1 = async_test("Verify cascading of default-src to script-src
policy: block"); |
| 15 var scriptsrc2 = async_test("Verify cascading of default-src to script-src
policy: allow"); |
| 16 var allowedScriptRan = false; |
| 17 </script> |
| 18 |
| 19 <script src='pass-0_1.js'></script> |
| 20 |
| 21 <script> |
| 22 var inlineScript = document.createElement('script'); |
| 23 inlineScript.src = buildSiblingPath('www1', 'fail-0_1.js'); |
| 24 document.getElementById('log').appendChild(inlineScript); |
| 25 onload = function() { |
| 26 scriptsrc1.done(); |
| 27 scriptsrc2.step( function() { assert_true(allowedScriptRan, "allowed s
cript didn't run") }); |
| 28 scriptsrc2.done(); |
| 29 } |
| 30 </script> |
| 31 |
| 32 <script async defer src='../support/checkReport.sub.js?reportField=violated-
directive&reportValue=default-src%20%27self%27%20%27unsafe-inline%27'></script> |
| 33 |
| 34 </body> |
| 35 </html> |
| OLD | NEW |
|---|
Chromium Code Reviews
Issue 2695813009:
Import wpt@503f5b5f78ec4e87d144f78609f363f0ed0ea8db (Closed)
