OLD | NEW |
---|---|
(Empty) | |
1 <!DOCTYPE html> | |
2 <html> | |
3 <head> | |
4 <meta http-equiv="Content-Security-Policy" content="default-src 'none'; scri pt-src 'self' 'unsafe-eval'"> | |
5 <script src="./resources/bypass-main-world-csp-for-inline-style.js"></script > | |
6 </head> | |
7 <body> | |
8 <p> | |
9 This test ensures that style applied in isolated worlds marked with | |
10 their own Content Security Policy aren't affected by the page's content | |
11 security policy. Extensions, for example, should be able to inject | |
12 inline CSS (even though it's probably a bad idea to do so). | |
13 </p> | |
14 </body> | |
15 </html> | |
OLD | NEW |