Content - 9e4e345a1670bf951c4736978ad9e66da6496bed - e008722/content-security-policy/img-src/img-src-4_1.sub.html

visit type:

Tip revision: 57a82af3537d05ffe7b022c53939e6fb54895c6c authored by Stephen McGruer on 04 April 2018, 19:41:56 UTC
Web Animations: Fix bug with Document::getAnimations

Tip revision: 57a82af

img-src-4_1.sub.html

<!DOCTYPE HTML>
<meta http-equiv="Content-Security-Policy" content="img-src 'self' {{domains[www]}}:{{ports[http][0]}}">
<html>
<head>
    <title>img element src attribute must match src list.</title>
    <script src='/resources/testharness.js'></script>
    <script src='/resources/testharnessreport.js'></script>
</head>
<body>
    <div id='log'/>

    <script>
      async_test(function(t) {
        i = new Image();
        i.onload = t.step_func_done();
        i.onerror = t.unreached_func("The img should have loaded");
        i.src = '/content-security-policy/support/pass.png';
      }, "img-src for relative path should load");

      async_test(function(t) {
        i = new Image();
        i.onload = t.unreached_func("Image from unapproved domain was loaded.");
        i.onerror = t.step_func_done();
        i.src = 'http://{{domains[www1]}}/content-security-policy/support/fail.png';
      }, "img-src from unapproved domains should not load");

      async_test(function(t) {
        i = new Image();
        i.onload = t.step_func_done();
        i.onerror = t.unreached_func("The img should have loaded");
        i.src = location.protocol + '//{{domains[www]}}:{{ports[http][0]}}/content-security-policy/support/pass.png';
      }, "img-src from approved domains should load");
    </script>
</body>
</html>

Browse the archive

https://github.com/web-platform-tests/wpt