wine/gecko
0
0
Fork 0
mirror of https://gitlab.winehq.org/wine/wine-gecko.git synced 2024-09-13 09:24:08 -07:00
Code Issues Packages Projects Releases Wiki Activity

Bug 1086999 - CSP: Asterisk (*) wildcard should not allow blob:, data:, or filesystem: when matching source expressions - web platform test update (r=sstamm,jgraham)

Browse Source
This commit is contained in:
Christoph Kerschbaumer 2015-03-11 17:16:13 -07:00
parent d8ec9fff9f
commit e9aea30813
2 changed files with 7 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
testing/web-platform/meta/content-security-policy/script-src/script-src-1_9.html.ini
View File

@ -1,8 +1,5 @@
[script-src-1_9.html]
type: testharness
[test inline worker]
expected: FAIL
[Violation report status OK.]
expected: FAIL

14
testing/web-platform/tests/content-security-policy/script-src/buildInlineWorker.js
View File

@ -1,20 +1,20 @@
(function ()
{
var test = new async_test("test inline worker");
var workerSource = document.getElementById('inlineWorker');
var blob = new Blob([workerSource.textContent]);
// can I create a new script tag like this? ack...
var url = window.URL.createObjectURL(blob);
var worker = new Worker(url);
try {
var worker = new Worker(url);
}
catch (e) {
done();
}
worker.addEventListener('message', function(e) {
test.step(function () {
assert_not_equals(e.data, 'fail', 'inline script ran');
test.done();
})
assert_unreached("script ran");
}, false);
worker.postMessage('');