Content - 5a8cdec8472e923bf8984d5b5c77a6cf939e4d13 - 2aa68d3/content-security-policy/script-src/injected-inline-script-allowed.sub.html

visit type:

Tip revision: 1d80ed8c6e3c70dc91ecdc3942cf736c974e2490 authored by Behind The Math on 05 April 2018, 03:02:14 UTC
Add tests to check that the User-Agent header is set for XHR requests

Tip revision: 1d80ed8

injected-inline-script-allowed.sub.html

<!DOCTYPE html>
<html>

<head>
    <!-- Programmatically converted from a WebKit Reftest, please forgive resulting idiosyncracies.-->
    <meta http-equiv="Content-Security-Policy" content="script-src 'self' 'unsafe-inline'; connect-src 'self'">
    <title>injected-inline-script-allowed</title>
    <script src="/resources/testharness.js"></script>
    <script src="/resources/testharnessreport.js"></script>
    <script src='../support/logTest.sub.js?logs=["Pass 1 of 2","Pass 2 of 2"]'></script>
    <script src='../support/alertAssert.sub.js?alerts=[]'></script>
</head>

<body>
    <script>
       window.addEventListener('securitypolicyviolation', function(e) {
            log("Fail");
        });
    </script>
    <script src="support/inject-script.js"></script>
    <div id="log"></div>
</body>

</html>

Browse the archive

https://github.com/web-platform-tests/wpt