Content - 353a3a0d51b3532e6ef92c2341a863771b072b35 - 7ea51e0/content-security-policy/worker-src/shared-worker-src-self-fallback.sub.html

visit type:

Tip revision: d8e34a6517398e463ab4603caa9c4907d4731ade authored by jgraham on 17 April 2018, 09:34:04 UTC
Merge branch 'master' into gecko/1453415

Tip revision: d8e34a6

shared-worker-src-self-fallback.sub.html

<!doctype html>
<meta charset=utf-8>
<title>Web platform test for shared worker allowed by worker-src self</title>
<script src=/resources/testharness.js></script>
<script src=/resources/testharnessreport.js></script>
<script src="../support/testharness-helper.js"></script>
<!-- Ideally we would use "script-src 'none'" alone but we have to whitelist the actual script that spawns the workers, hence the nonce.-->
<meta http-equiv="Content-Security-Policy" content="worker-src 'self'; child-src 'none'; script-src 'none' 'nonce-foo'; default-src 'none'; ">
<script src="../support/shared-worker-helper.js" nonce="foo" id="foo" data-desc-fallback="Same-origin shared worker allowed by worker-src 'self'."></script>

Browse the archive

https://github.com/web-platform-tests/wpt