Index: third_party/WebKit/LayoutTests/external/wpt/content-security-policy/script-src/addInlineTestsWithDOMManipulation.js |
diff --git a/third_party/WebKit/LayoutTests/external/wpt/content-security-policy/script-src/addInlineTestsWithDOMManipulation.js b/third_party/WebKit/LayoutTests/external/wpt/content-security-policy/script-src/addInlineTestsWithDOMManipulation.js |
new file mode 100644 |
index 0000000000000000000000000000000000000000..cd093ac94234319ddb9f310d9651bd147c6b69a5 |
--- /dev/null |
+++ b/third_party/WebKit/LayoutTests/external/wpt/content-security-policy/script-src/addInlineTestsWithDOMManipulation.js |
@@ -0,0 +1,18 @@ |
+(function () { |
+ |
+ var dmTest = async_test("DOM manipulation inline tests"); |
+ var attachPoint = document.getElementById('attachHere'); |
+ var inlineScript = document.createElement('script'); |
+ var scriptText = document.createTextNode('dmTest.step(function() {assert_unreached("Unsafe inline script ran - createTextNode.")});'); |
+ |
+ inlineScript.appendChild(scriptText); |
+ attachPoint.appendChild(inlineScript); |
+ |
+ document.getElementById('emptyScript').innerHTML = 'dmTest.step(function() {assert_unreached("Unsafe inline script ran - innerHTML.")});'; |
+ document.getElementById('emptyDiv').outerHTML = '<script id=outerHTMLScript>dmTest.step(function() {assert_unreached("Unsafe inline script ran - outerHTML.")});</script>'; |
+ |
+ document.write('<script>dmTest.step(function() {assert_unreached("Unsafe inline script ran - document.write")});</script>'); |
+ document.writeln('<script>dmTest.step(function() {assert_unreached("Unsafe inline script ran - document.writeln")});</script>'); |
+ |
+ dmTest.done(); |
+})(); |