Content - 3b47d0b2e22f72bb39cce8f3f98f21b97d4f7004 - a266443/content-security-policy/font-src/font-stylesheet-font-blocked.sub.html

visit type:

Tip revision: dd79be3ee575503e4e9595dfe8ce8141d8aedb72 authored by Hiroki Nakagawa on 22 March 2018, 05:53:36 UTC
Worker: Support ES Modules on DedicatedWorker behind the runtime flag

Tip revision: dd79be3

font-stylesheet-font-blocked.sub.html

<!doctype html>
<meta charset=utf-8>
<meta http-equiv="Content-Security-Policy" content="font-src 'none'">
<head>
  <title>Test font does not load if it does not match font-src.</title>
  <script src='/resources/testharness.js'></script>
  <script src='/resources/testharnessreport.js'></script>
</head>
<body>
  <div id="log"/>
  <script>
    async_test(function(t) {
      var link = document.createElement('link');
      link.rel="stylesheet";
      link.type="text/css";
      link.href="/content-security-policy/support/fonts.css";
      // The stylesheet should stil load, even though the font contained does not
      link.onerror = t.unreached_func("Should have loaded the stylesheet.");
      document.addEventListener("securitypolicyviolation", t.step_func_done(function(e) {
        assert_equals(e.violatedDirective, "font-src");
      }));
      document.getElementsByTagName('head')[0].appendChild(link);
    }, "Test font does not load if it does not match font-src.");
  </script>
</body>

Browse the archive

https://github.com/web-platform-tests/wpt