third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/nonces/script-nonces-hidden.php - Issue 2801243002: More tweaks to <script nonce> hiding.

Unified Diff: third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/nonces/script-nonces-hidden.php

Issue 2801243002: More tweaks to <script nonce> hiding. (Closed)

Patch Set: Moved tests. Created 3 years, 7 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View side-by-side diff with in-line comments

« no previous file with comments | « third_party/WebKit/LayoutTests/external/wpt/html/dom/reflection-misc-expected.txt ('k') | third_party/WebKit/LayoutTests/virtual/service-worker-navigation-preload-disabled/webexposed/global-interface-listing-expected.txt » ('j') | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Hide Comments ('s')

Index: third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/nonces/script-nonces-hidden.php

diff --git a/third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/nonces/script-nonces-hidden.php b/third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/nonces/script-nonces-hidden.php

deleted file mode 100644

index d1215d6e437bd4f96c52d99459aec0bdc3c8301c..0000000000000000000000000000000000000000

--- a/third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/nonces/script-nonces-hidden.php

+++ /dev/null

@@ -1,88 +0,0 @@

-<?php

- header("Content-Security-Policy: script-src 'self' 'nonce-abc'; img-src 'none'");

-?>

-<!doctype html>

-<script src="/resources/testharness.js"></script>

-<script src="/resources/testharnessreport.js"></script>

-<body>

-

-<script nonce="abc">

- test(t => {

- assert_equals(document.querySelector('[nonce=abc]'), null);

- assert_equals(document.currentScript.getAttribute('nonce'), '[Replaced]');

- assert_equals(document.currentScript.nonce, 'abc');

- }, "HTML: Reading 'nonce' content attribute and IDL attribute.");

- test(t => {

- document.currentScript.setAttribute('nonce', 'xyz');

- assert_equals(document.currentScript.getAttribute('nonce'), '[Replaced]');

- assert_equals(document.currentScript.nonce, 'xyz');

- }, "HTML: Writing 'nonce' content attribute.");

- test(t => {

- assert_equals(document.currentScript.nonce, 'xyz');

- document.currentScript.nonce = 'foo';

- assert_equals(document.currentScript.nonce, 'foo');

- assert_equals(document.currentScript.getAttribute('nonce'), '[Replaced]');

- }, "HTML: Writing 'nonce' DOM attribute.");

- async_test(t => {

- var script = document.currentScript;

- assert_equals(script.nonce, 'foo');

- setTimeout(t.step_func_done(_ => {

- assert_equals(script.nonce, "foo");

- }), 1);

- }, "HTML: 'nonce' DOM attribute present after current task.");

-</script>

-

-<svg xmlns="http://www.w3.org/2000/svg">

- <script nonce="abc">

- test(t => {

- assert_equals(document.querySelector('[nonce=abc]'), null);

- assert_equals(document.currentScript.getAttribute('nonce'), '[Replaced]');

- assert_equals(document.currentScript.nonce, 'abc');

- }, "SVG: Reading 'nonce' content attribute and IDL attribute.");

- test(t => {

- document.currentScript.setAttribute('nonce', 'xyz');

- assert_equals(document.currentScript.getAttribute('nonce'), '[Replaced]');

- assert_equals(document.currentScript.nonce, 'xyz');

- }, "SVG: Writing 'nonce' content attribute.");

- test(t => {

- assert_equals(document.currentScript.nonce, 'xyz');

- document.currentScript.nonce = 'foo';

- assert_equals(document.currentScript.nonce, 'foo');

- assert_equals(document.currentScript.getAttribute('nonce'), '[Replaced]');

- }, "SVG: Writing 'nonce' DOM attribute.");

- async_test(t => {

- var script = document.currentScript;

- assert_equals(script.nonce, 'foo');

- setTimeout(t.step_func_done(_ => {

- assert_equals(script.nonce, "foo");

- }), 1);

- }, "SVG: 'nonce' DOM attribute present after current task.");

- </script>

-</svg>

-

-<style>

- #test { display: block; }

- #test[nonce=abc] { background: url(/security/resources/abe.png); }

-</style>

-<script nonce="abc">

- var css_test = async_test(t => {

- document.addEventListener('securitypolicyviolation', e => {

- assert_unreached("No image should be requested via CSS.");

- });

- }, "Nonces don't leak via CSS side-channels.");

-</script>

-<script id="test" nonce="abc">

- window.onload = e => {

- css_test.done();

- };

-</script>