Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(71)

Unified Diff: LayoutTests/http/tests/security/contentSecurityPolicy/1.1/scriptnonce-invalidnonce.html

Issue 14949017: Implementation of W3C compliant CSP script-src nonce. (Closed) Base URL: https://chromium.googlesource.com/chromium/blink.git@master
Patch Set: Minor fixes based on Adam's comments Created 7 years, 7 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: LayoutTests/http/tests/security/contentSecurityPolicy/1.1/scriptnonce-invalidnonce.html
diff --git a/LayoutTests/http/tests/security/contentSecurityPolicy/1.1/scriptnonce-invalidnonce.html b/LayoutTests/http/tests/security/contentSecurityPolicy/1.1/scriptnonce-invalidnonce.html
index 92573f3e9759220fe53daf514ef71c21ae23ccf6..265f4e35b36e62e70a599fc433528630898d2ddc 100644
--- a/LayoutTests/http/tests/security/contentSecurityPolicy/1.1/scriptnonce-invalidnonce.html
+++ b/LayoutTests/http/tests/security/contentSecurityPolicy/1.1/scriptnonce-invalidnonce.html
@@ -4,10 +4,12 @@
<script src='../resources/multiple-iframe-test.js'></script>
<script>
var tests = [
- ['no', 'script-src 127.0.0.1:8000; script-nonce;', 'resources/script.js', ''],
- ['no', 'script-src 127.0.0.1:8000; script-nonce ;', 'resources/script.js', ''],
- ['no', 'script-src 127.0.0.1:8000; script-nonce ;', 'resources/script.js', ''],
- ['no', 'script-src 127.0.0.1:8000; script-nonce nonces have no spaces;', 'resources/script.js', ''],
+ ['no', 'script-src \'nonce- \'', 'resources/script.js', ''],
+ ['no', 'script-src \'nonce- \'', 'resources/script.js', ''],
+ ['no', 'script-src \'nonce- nonces have no spaces\'', 'resources/script.js', ''],
+ ['no', 'script-src \'nonce-1/1\'', 'resources/script.js', '1/1'],
+ ['no', 'script-src \'nonce-{}\'', 'resources/script.js', '{}'],
+ ['no', 'script-src \'nonce-/\\\'', 'resources/script.js', '/\\'],
];
</script>
</head>

Powered by Google App Engine
This is Rietveld 408576698