Content - 72326ee6fc615ee15219c64b5f6a0a5d1bbe81c1 - 5bb66b7/content-security-policy/img-src/img-src-wildcard-allowed.html

visit type:

Tip revision: 210e5bc8e07cb74096b2f8e4c0fa0d75d463d4f4 authored by Geoffrey Sneddon on 24 March 2018, 14:57:11 UTC
Add tests for wptserve.pipes.ReplacementTokenizer

Tip revision: 210e5bc

img-src-wildcard-allowed.html

<!DOCTYPE html>
<meta http-equiv="Content-Security-Policy" content="img-src *;">
<html>
<head>
    <title>img element src attribute must match src list.</title>
    <script src='/resources/testharness.js'></script>
    <script src='/resources/testharnessreport.js'></script>
</head>
<body>
    <div id='log'/>

    <script>
      var t1 = async_test("img-src with wildcard should match all");
    </script>
    <img src='/content-security-policy/support/pass.png'
         onload='t1.done();'
         onerror='t1.step(function() { assert_unreached("Image should have loaded"); t1.done(); });'>

    <script>
      async_test(function(t) {

        var pngBase64 = "iVBORw0KGgoAAAANSUhEUgAAAGQAAABkCAIAAAD/gAIDAAAACXBIWXMAAAsTAAALEwEAmpwYAAAAnklEQVR42u3QMQEAAAgDoGlyo1vBzwciUJlw1ApkyZIlS5YsBbJkyZIlS5YCWbJkyZIlS4EsWbJkyZKlQJYsWbJkyVIgS5YsWbJkKZAlS5YsWbIUyJIlS5YsWQpkyZIlS5YsBbJkyZIlS5YCWbJkyZIlS4EsWbJkyZKlQJYsWbJkyVIgS5YsWbJkKZAlS5YsWbIUyJIlS5YsWQpkyfq2MosBSIeKONMAAAAASUVORK5CYII=";

        blobContents = [atob(pngBase64)];
        blob = new Blob(blobContents, {type: "image/png"});
        img = document.createElement("img");
        img.onerror = function (e) {
          t.done();
        };
        img.onload = function () {
          assert_unreached("Should not load blob img");
          t.done();
        };
        blobURL = window.URL.createObjectURL(blob);
        img.src = blobURL;

      },"img-src with wildcard should not match blob");
    </script>
</body>
</html>

Browse the archive

https://github.com/web-platform-tests/wpt