Content - 06e79db006286c0ed4f436b3fc57b9cf257a5a48 - 5e21070/content-security-policy/worker-src/dedicated-worker-src-self-fallback.sub.html

visit type:

Tip revision: 21f1c08f6e5d4ead08f51968aa6246b2c54b7f15 authored by Geoffrey Sneddon on 10 April 2018, 07:46:22 UTC
Fix #10388: Make resources/test use the upstream config

Tip revision: 21f1c08

dedicated-worker-src-self-fallback.sub.html

<!doctype html>
<meta charset=utf-8>
<title>Web platform test for dedicated worker allowed by worker-src self</title>
<script src=/resources/testharness.js></script>
<script src=/resources/testharnessreport.js></script>
<script src="../support/testharness-helper.js"></script>
<!-- Ideally we would use "script-src 'none'" alone but we have to whitelist the actual script that spawns the workers, hence the nonce.-->
<meta http-equiv="Content-Security-Policy" content="worker-src 'self'; child-src 'none'; script-src 'none' 'nonce-foo'; default-src 'none'; ">
<script src="../support/dedicated-worker-helper.js" nonce="foo" id="foo" data-desc-fallback="Same-origin dedicated worker allowed by worker-src 'self'."></script>

Browse the archive

https://github.com/web-platform-tests/wpt