Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(331)

Unified Diff: LayoutTests/http/tests/security/script-crossorigin-loads-cross-origin.html

Issue 47923008: Block execution of failed 'crossorigin' <script>s. (Closed) Base URL: https://chromium.googlesource.com/chromium/blink.git@master
Patch Set: Rebased Created 7 years, 1 month ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: LayoutTests/http/tests/security/script-crossorigin-loads-cross-origin.html
diff --git a/LayoutTests/http/tests/security/script-crossorigin-loads-cross-origin.html b/LayoutTests/http/tests/security/script-crossorigin-loads-cross-origin.html
new file mode 100644
index 0000000000000000000000000000000000000000..46c5408d94d02242e5cd84bbb4f49c9adf5312fe
--- /dev/null
+++ b/LayoutTests/http/tests/security/script-crossorigin-loads-cross-origin.html
@@ -0,0 +1,22 @@
+<p>Test that a script element with a crossorigin attribute loads a cross-origin script correctly when the CORS check passes on the response.</p>
+<pre></pre>
+<script>
+if (window.testRunner) {
+ testRunner.dumpAsText();
+ testRunner.waitUntilDone();
+}
+
+var result = "FAIL";
+var have_reported = false;
+function loaded() {
+ if (!have_reported) {
+ document.querySelector("pre").innerHTML = result;
+ if (window.testRunner)
+ testRunner.notifyDone();
+ have_reported = true;
+ }
+}
+</script>
+<!-- This script should load -->
+<script crossorigin="anonymous" src="http://localhost:8000/security/resources/cors-script.php?cors=true&value=PASS" onload="loaded()"></script>
+<script>loaded();</script>

Powered by Google App Engine
This is Rietveld 408576698