Content - 53510852ef0d18b3d611d35f99f07249d64b6e1e - e694146/content-security-policy/worker-src/shared-worker-src-child-fallback.sub.html

visit type:

Tip revision: d474c2a0587f5ff6ae05fde66ac6f43a106d0d05 authored by Anne van Kesteren on 16 November 2018, 12:38:42 UTC
EventSource: test U+0000 in ID better

Tip revision: d474c2a

shared-worker-src-child-fallback.sub.html

<!doctype html>
<meta charset=utf-8>
<title>Web platform test for shared worker allowed by child-src self</title>
<script src=/resources/testharness.js></script>
<script src=/resources/testharnessreport.js></script>
<script src="../support/testharness-helper.js"></script>
<!-- Ideally we would use "script-src 'none'" alone but we have to whitelist the actual script that spawns the workers, hence the nonce.-->
<meta http-equiv="Content-Security-Policy" content="child-src 'self'; script-src 'none' 'nonce-foo'; default-src 'none'; ">
<script src="../support/shared-worker-helper.js" nonce="foo" id="foo" data-desc-fallback="Same-origin shared worker allowed by child-src 'self'."></script>

Browse the archive

https://github.com/web-platform-tests/wpt