File: file_bug941404.html

package info (click to toggle)
firefox-esr 128.14.0esr-1~deb12u1
  • links: PTS, VCS
  • area: main
  • in suites: bookworm
  • size: 4,230,248 kB
  • sloc: cpp: 7,104,262; javascript: 6,088,450; ansic: 3,654,017; python: 1,212,326; xml: 594,604; asm: 420,654; java: 182,969; sh: 71,124; makefile: 20,739; perl: 13,449; objc: 12,399; yacc: 4,583; cs: 3,846; pascal: 2,973; lex: 1,720; ruby: 1,194; exp: 762; php: 436; lisp: 258; awk: 247; sql: 66; sed: 54; csh: 10
file content (27 lines) | stat: -rw-r--r-- 790 bytes parent folder | download | duplicates (35) 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
 
<html>
<head> <meta charset="utf-8"> </head>
  <body>

    <!-- this should be allowed (no CSP)-->
    <img src="http://example.org/tests/dom/security/test/csp/file_CSP.sjs?testid=img_good&type=img/png"> </img>


    <script type="text/javascript">
      var req = new XMLHttpRequest();
      req.onload = function() {
        //this should be allowed (no CSP)
        try {
        var img = document.createElement("img");
        img.src="http://example.org/tests/dom/security/test/csp/file_CSP.sjs?testid=img2_good&type=img/png";
        document.body.appendChild(img);
        } catch(e) {
          console.log("yo: "+e);
        }
      };
      req.open("get", "file_bug941404_xhr.html", true);
      req.responseType = "document";
      req.send();
    </script>

  </body>
</html>