LayoutTests/http/tests/security/script-crossorigin-fails-cross-origin-2.xhtml - Issue 47923008: Block execution of failed 'crossorigin' <script>s.

Side by Side Diff

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Keyboard Shortcuts

	File
u :	up to issue
j / k :	jump to file after / before current file
J / K :	jump to next file with a comment after / before current file
	Side-by-side diff
i :	toggle intra-line diffs
e :	expand all comments
c :	collapse all comments
s :	toggle showing all comments
n / p :	next / previous diff chunk or comment
N / P :	next / previous comment
<Up> / <Down> :	next / previous line

	Issue
u :	up to list of issues
j / k :	jump to patch after / before current patch
o / <Enter> :	open current patch in side-by-side view
i :	open current patch in unified diff view

	Issue List
j / k :	jump to issue after / before current issue
o / <Enter> :	open current issue

Side by Side Diff: LayoutTests/http/tests/security/script-crossorigin-fails-cross-origin-2.xhtml

Issue 47923008: Block execution of failed 'crossorigin' <script>s. (Closed) Base URL: https://chromium.googlesource.com/chromium/blink.git@master

Patch Set: Rebased Created 7 years, 1 month ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

OLD	NEW
(Empty)
	1 <?xml version="1.0"?>

	2 <html xmlns='http://www.w3.org/1999/xhtml'>

	3 <head>

	4 <title>crossorigin and XHTML</title>

	5 </head>

	6 <body>

	7 <p>In an XHTML document, test that a script element with a crossorigin attribute does not load a cross-origin script when the resource sharing check fails on th e response.</p>

	8 <pre></pre>

	9 <script>

	10 if (window.testRunner) {

	11 testRunner.dumpAsText();

	12 testRunner.waitUntilDone();

	13 }

	14

	15 var result = "PASS";

	16

	17 function must_not_fire() {

	18 result = "FAIL";

	19 }

	20

	21 function loaded() {

	22 document.querySelector("pre").innerHTML = result;

	23 if (window.testRunner)

	24 testRunner.notifyDone();

	25 }

	26 </script>

	27 <!-- This script should _not_ load, nor fire onload. -->

	28 <script crossorigin="anonymous" src="http://localhost:8000/security/resources/co rs-script.php?cors=false&value=FAIL" onload="must_not_fire()"></script>

	29 <script><![CDATA[loaded();]]></script>

	30 </body>

	31 </html>

	32

OLD	NEW