Content - a5a78ae1a347930b759afbc1ec1ceac953eb9df7 - dbeec8e/content-security-policy/base-uri/base-uri-deny.sub.html

visit type:

Tip revision: 47c97a405921a671c3ca6ce73818f3a8b5bd8b25 authored by Geoffrey Sneddon on 04 April 2018, 21:24:40 UTC
Update test_sauce to use actual config objects

Tip revision: 47c97a4

base-uri-deny.sub.html

<!DOCTYPE html>
<html>
<head>
    <meta http-equiv="Content-Security-Policy" content="base-uri {{location[scheme]}}://{{domains[www1]}}:{{ports[http][0]}}/">
    <script src='/resources/testharness.js'></script>
    <script src='/resources/testharnessreport.js'></script>

    <script>
      var t = async_test("Check that baseURI fires a securitypolicyviolation event when it does not match the csp directive");
      window.addEventListener('securitypolicyviolation', t.step_func_done(function(e) {
        assert_equals(e.blockedURI, "{{location[scheme]}}://{{domains[www2]}}:{{ports[http][0]}}/")
        assert_equals(e.violatedDirective, "base-uri");
      }));
    </script>

    <base href="{{location[scheme]}}://{{domains[www2]}}:{{ports[http][0]}}/">
    <script>
    test(function() {
      assert_equals(document.baseURI, window.location.href);
      t.done();
    }, "Check that the baseURI is not set when it does not match the csp directive");
    </script>
</head>
<body>
</html>

Browse the archive

https://github.com/web-platform-tests/wpt