Chromium Code Reviews| OLD | NEW |
|---|---|
| (Empty) | |
| 1 <!DOCTYPE HTML> | |
| 2 <meta http-equiv="Content-Security-Policy" content="img-src 'self' {{domains[www ]}}:{{ports[http][0]}}"> | |
| 3 <html> | |
| 4 <head> | |
| 5 <title>img element src attribute must match src list.</title> | |
| 6 <script src='/resources/testharness.js'></script> | |
| 7 <script src='/resources/testharnessreport.js'></script> | |
| 8 </head> | |
| 9 <body> | |
| 10 <div id='log'/> | |
| 11 | |
| 12 <script> | |
| 13 async_test(function(t) { | |
| 14 i = new Image(); | |
| 15 i.onload = t.step_func_done(function() { | |
| 16 assert_equals(i.naturalWidth, 168); | |
|
qyearsley
2017/03/23 18:00:40
It appears that sometimes this may be zero on some
| |
| 17 assert_equals(i.naturalHeight, 64); | |
| 18 }); | |
| 19 i.onerror = t.unreached_func("The img should have loaded"); | |
| 20 i.src = '/content-security-policy/support/pass.png'; | |
| 21 }, "img-src for relative path should load"); | |
| 22 | |
| 23 async_test(function(t) { | |
| 24 i = new Image(); | |
| 25 i.onload = t.unreached_func("Image from unapproved domain was loaded."); | |
| 26 i.onerror = t.step_func_done(); | |
| 27 i.src = 'http://{{domains[www1]}}/content-security-policy/support/fail.p ng'; | |
| 28 }, "img-src from unapproved domains should not load"); | |
| 29 | |
| 30 async_test(function(t) { | |
| 31 i = new Image(); | |
| 32 i.onload = t.step_func_done(function() { | |
| 33 assert_equals(i.naturalWidth, 168); | |
| 34 assert_equals(i.naturalHeight, 64); | |
| 35 }); | |
| 36 i.onerror = t.unreached_func("The img should have loaded"); | |
| 37 i.src = location.protocol + '//{{domains[www]}}:{{ports[http][0]}}/conte nt-security-policy/support/pass.png'; | |
| 38 }, "img-src from approved domains should load"); | |
| 39 </script> | |
| 40 </body> | |
| 41 </html> | |
| OLD | NEW |