Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(208)

Side by Side Diff: LayoutTests/http/tests/security/subresourceIntegrity/subresource-integrity-script-no-cors.html

Issue 954233003: Enable SRI only for same origin and CORS content. (Closed) Base URL: https://chromium.googlesource.com/chromium/blink.git@master
Patch Set: Created 5 years, 9 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
(Empty)
1 <!DOCTYPE html>
2 <head>
3 </head>
4 <body>
5 <script src="/js-test-resources/js-test.js"></script>
6 <script>
7 window.jsTestIsAsync = true;
8 description("The test passes if the script loads but also has a console error saying that the specified integrity attribute cannot be enforced because t he resource is not CORS enabled.");
9 </script>
10 <script integrity="ni:///sha256;deadbeef" src="http://localhost:8000/securit y/resources/cors-script.php?credentials=true&cors=false" onload="testPassed('Scr ipt ran.');finishJSTest();" onerror="testFailed('Script failed to load script re source.');"></script>
11 </body>
12 </html>
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698