Content - 08e09b95063c12af9567d31ad14aec07eea7ba05 - 9d469b0/content-security-policy/plugin-types/plugintypes-mismatched-url.sub.html

visit type:

Tip revision: 4fae1e45c3892f37065a107124e31d60b10b3c7b authored by David Storey on 23 March 2018, 00:50:21 UTC
Add focus composed test

Tip revision: 4fae1e4

plugintypes-mismatched-url.sub.html

<!DOCTYPE html>
<html>

<head>
    <!-- Programmatically converted from a WebKit Reftest, please forgive resulting idiosyncracies.-->
    <meta http-equiv="Content-Security-Policy" content="plugin-types application/x-invalid-type; script-src 'self' 'unsafe-inline'; connect-src 'self';">
    <title>plugintypes-mismatched-url</title>
    <script src="/resources/testharness.js"></script>
    <script src="/resources/testharnessreport.js"></script>
    <script src='../support/logTest.sub.js?logs=["After object"]'></script>
    <script src="../support/alertAssert.sub.js?alerts=[]"></script>
</head>

<body>
    <script>
        window.addEventListener('securitypolicyviolation', function(e) {
            log("Fail");
        });
    </script>    

    This tests that plugin content that doesn&apos;t match the declared type doesn&apos;t load, even if the document&apos;s CSP would allow it. This test passes if no iframe is dumped (meaning that no PluginDocument was created).
    <object type="application/x-invalid-type" data="/plugins/resources/mock-plugin.pl" log="FAIL!"></object>
    <script>
        log("After object");
    </script>
    <div id="log"></div>
</body>

</html>

Browse the archive

https://github.com/web-platform-tests/wpt