Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(91)

Side by Side Diff: LayoutTests/http/tests/security/isolatedWorld/bypass-main-world-csp-for-inline-style.html

Issue 341443003: Isolated world injected inline styles should bypass main world CSP. (Closed) Base URL: https://chromium.googlesource.com/chromium/blink.git@master
Patch Set: Created 6 years, 6 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « no previous file | LayoutTests/http/tests/security/isolatedWorld/bypass-main-world-csp-for-inline-style-expected.txt » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
(Empty)
1 <!DOCTYPE html>
2 <html>
3 <head>
4 <meta http-equiv="Content-Security-Policy" content="default-src 'none'; scri pt-src 'self' 'unsafe-eval'">
5 <script src="./resources/bypass-main-world-csp-for-inline-style.js"></script >
6 </head>
7 <body>
8 <p>
9 This test ensures that style applied in isolated worlds marked with
10 their own Content Security Policy aren't affected by the page's content
11 security policy. Extensions, for example, should be able to inject
12 inline CSS (even though it's probably a bad idea to do so).
13 </p>
14 </body>
15 </html>
OLDNEW
« no previous file with comments | « no previous file | LayoutTests/http/tests/security/isolatedWorld/bypass-main-world-csp-for-inline-style-expected.txt » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698