Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(163)

Unified Diff: LayoutTests/http/tests/security/contentSecurityPolicy/1.1/scriptnonce-redirect.html

Issue 14949017: Implementation of W3C compliant CSP script-src nonce. (Closed) Base URL: https://chromium.googlesource.com/chromium/blink.git@master
Patch Set: Minor fixes based on Adam's comments Created 7 years, 7 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: LayoutTests/http/tests/security/contentSecurityPolicy/1.1/scriptnonce-redirect.html
diff --git a/LayoutTests/http/tests/security/contentSecurityPolicy/1.1/scriptnonce-redirect.html b/LayoutTests/http/tests/security/contentSecurityPolicy/1.1/scriptnonce-redirect.html
new file mode 100644
index 0000000000000000000000000000000000000000..0e09040215c3d1d874ad65d8183b9cdd3db3962f
--- /dev/null
+++ b/LayoutTests/http/tests/security/contentSecurityPolicy/1.1/scriptnonce-redirect.html
@@ -0,0 +1,14 @@
+<!DOCTYPE html>
+<html>
+ <head>
+ <meta http-equiv="Content-Security-Policy" content="script-src 'nonce-noncynonce'"></meta>
+ <script nonce="noncynonce">
+ if (window.testRunner)
+ testRunner.dumpAsText();
+ </script>
+ </head>
+ <body>
+ This tests whether a deferred script load caused by a redirect is properly allowed by a nonce.
+ <script nonce='noncynonce' src='../resources/redir.php?url=http://localhost:8000/security/contentSecurityPolicy/resources/alert-pass.js'></script>
+ </body>
+</html>

Powered by Google App Engine
This is Rietveld 408576698