File: scriptnonce-specified-source.sub.html

package info (click to toggle)
firefox-esr 140.4.0esr-1
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid
  • size: 4,539,276 kB
  • sloc: cpp: 7,381,286; javascript: 6,388,710; ansic: 3,710,139; python: 1,393,780; xml: 628,165; asm: 426,918; java: 184,004; sh: 65,742; makefile: 19,302; objc: 13,059; perl: 12,912; yacc: 4,583; cs: 3,846; pascal: 3,352; lex: 1,720; ruby: 1,226; exp: 762; php: 436; lisp: 258; awk: 247; sql: 66; sed: 54; csh: 10
file content (43 lines) | stat: -rw-r--r-- 1,338 bytes parent folder | download | duplicates (16) 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
 
<!doctype html>
<script nonce="specified" src="/resources/testharness.js"></script>
<script nonce="specified" src="/resources/testharnessreport.js"></script>

<div id=log></div>
<script nonce="specified">
  [
    {
      name: 'CSP with both source and nonce should allow matching source',
      src: "http://{{host}}:{{ports[http][0]}}/content-security-policy/support/alert-pass.js",
      nonce: "notspecified"
    },
    {
      name: 'CSP with both source and nonce should allow both matching nonce and source',
      src: "http://{{host}}:{{ports[http][0]}}/content-security-policy/support/alert-pass.js",
      nonce: "specified"
    }
  ].forEach(elt => {
    async_test((test) => {
      const s = document.createElement('script');
      s.src = elt.src;
      s.nonce = elt.nonce;
      s.onload = () => test.done();
      s.onerror = test.unreached_func('Script should load correctly');
      document.body.appendChild(s);
    }, elt.name);
  });

  const t = async_test('No CSP violation should fire and all scripts should load');
  let count = 0;
  const expected = 2;
  function alert_assert(msg) {
    if (msg === "PASS") {
      count++;
      if (count == expected) {
        t.done();
      }
    }
  }

  window.addEventListener('securitypolicyviolation',
    t.unreached_func('No CSP violation should fire'));
</script>