File: csp-blocked-transparent.https.html

package info (click to toggle)
firefox-esr 140.4.0esr-1~deb13u1
  • links: PTS, VCS
  • area: main
  • in suites: trixie
  • size: 4,539,284 kB
  • sloc: cpp: 7,381,286; javascript: 6,388,710; ansic: 3,710,139; python: 1,393,780; xml: 628,165; asm: 426,916; java: 184,004; sh: 65,742; makefile: 19,302; objc: 13,059; perl: 12,912; yacc: 4,583; cs: 3,846; pascal: 3,352; lex: 1,720; ruby: 1,226; exp: 762; php: 436; lisp: 258; awk: 247; sql: 66; sed: 54; csh: 10
file content (41 lines) | stat: -rw-r--r-- 1,302 bytes parent folder | download | duplicates (14) 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
 
<!DOCTYPE html>
<title>Test transparent fenced frame navigations with blocked CSP</title>
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
<script src="/common/utils.js"></script>
<script src="resources/utils.js"></script>
<script src="/common/get-host-info.sub.js"></script>
<script src="/common/dispatcher/dispatcher.js"></script>

<body>
<script>
const blockedCSPs = [
  "none",
  "https://localhost:80",
  "https://*:80",
  "https://localhost:*"
];
blockedCSPs.forEach((csp) => {
  promise_test(async() => {
    const iframe = setupCSP(csp);
    const key = token();
    const url = generateURL("/fenced-frame/resources/embeddee.html", [key]);

    await iframe.execute(async (key, url, csp) => {
      let promise = new Promise((resolve) => {
        window.addEventListener('securitypolicyviolation', function(e) {
          resolve(e.violatedDirective + ";" + e.blockedURI);
        }, {once: true});
      });

      attachFencedFrame(url);

      await promise.then((result) => {
        assert_equals(result, "fenced-frame-src;" + url,
            "The fenced frame should not load for CSP fenced-frame-src " + csp);
      });
    }, [key, url, csp]);
  }, "Fenced frame loaded for CSP fenced-frame-src " + csp);
});
</script>
</body>