OLD | NEW |
---|---|
(Empty) | |
1 <!DOCTYPE html> | |
2 <meta http-equiv="Content-Security-Policy" content="img-src *.127.0.0.1:{{ports[ http][0]}}"> | |
3 <html> | |
4 <head> | |
5 <title>img-src with full host and wildcard blocks correctly.</title> | |
6 <script src='/resources/testharness.js'></script> | |
7 <script src='/resources/testharnessreport.js'></script> | |
8 </head> | |
9 <body> | |
10 <div id='log'/> | |
11 | |
12 <script> | |
13 var t1 = async_test("img src does not match full host and wildcard csp dir ective"); | |
14 </script> | |
15 <img src='http://127.0.0.1:{{ports[http][0]}}/content-security-policy/suppor t/fail.png' | |
Mike West
2017/03/22 11:56:22
Nit: Please change both `127.0.0.1` instances to `
andypaicu
2017/03/23 09:22:10
done
| |
16 onload='t1.step(function() { assert_unreached("Image should have loaded "); t1.done(); });' | |
17 onerror='t1.done();'> | |
Mike West
2017/03/22 11:56:22
Nit: I vaguely prefer the scripty version above, b
| |
18 | |
19 </body> | |
20 </html> | |
OLD | NEW |