Chromium Code Reviews| OLD | NEW |
|---|---|
| (Empty) | |
| 1 <!DOCTYPE html> | |
| 2 <meta http-equiv="Content-Security-Policy" content="img-src *.127.0.0.1:{{ports[ http][0]}}"> | |
| 3 <html> | |
| 4 <head> | |
| 5 <title>img-src with full host and wildcard blocks correctly.</title> | |
| 6 <script src='/resources/testharness.js'></script> | |
| 7 <script src='/resources/testharnessreport.js'></script> | |
| 8 </head> | |
| 9 <body> | |
| 10 <div id='log'/> | |
| 11 | |
| 12 <script> | |
| 13 var t1 = async_test("img src does not match full host and wildcard csp dir ective"); | |
| 14 </script> | |
| 15 <img src='http://127.0.0.1:{{ports[http][0]}}/content-security-policy/suppor t/fail.png' | |
|
Mike West
2017/03/22 11:56:22
Nit: Please change both `127.0.0.1` instances to `
andypaicu
2017/03/23 09:22:10
done
| |
| 16 onload='t1.step(function() { assert_unreached("Image should have loaded "); t1.done(); });' | |
| 17 onerror='t1.done();'> | |
|
Mike West
2017/03/22 11:56:22
Nit: I vaguely prefer the scripty version above, b
| |
| 18 | |
| 19 </body> | |
| 20 </html> | |
| OLD | NEW |