File: preload-dynamic-csp.html

package info (click to toggle)
firefox 145.0-1
  • links: PTS, VCS
  • area: main
  • in suites: sid
  • size: 4,653,344 kB
  • sloc: cpp: 7,594,932; javascript: 6,459,612; ansic: 3,752,905; python: 1,403,433; xml: 629,811; asm: 438,677; java: 186,421; sh: 67,287; makefile: 19,169; objc: 13,086; perl: 12,982; yacc: 4,583; cs: 3,846; pascal: 3,448; lex: 1,720; ruby: 1,003; exp: 762; php: 436; lisp: 258; awk: 247; sql: 66; sed: 54; csh: 10
file content (27 lines) | stat: -rw-r--r-- 1,153 bytes parent folder | download | duplicates (17) 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
 
<!DOCTYPE html>
<title>Makes sure that preload requests respect CSP directives that are added after the preload</title>
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
<script src="/preload/resources/preload_helper.js"></script>
<link id="preload" rel=preload href="resources/square.png" as=image>
<body>
<script>
    setup({single_test: true});

    const preload = document.querySelector("#preload");
    preload.addEventListener("load", async () => {
        const meta = document.createElement("meta");
        meta.httpEquiv = "Content-Security-Policy";
        meta.content = "img-src 'none'";
        document.head.appendChild(meta);
        const img = document.createElement("img");
        img.src = preload.href;
        document.body.appendChild(img);
        const load = new Promise(resolve => img.addEventListener("load", () => resolve('load')));
        const error = new Promise(resolve => img.addEventListener("error", () => resolve('error')));
        const result = await Promise.any([load, error]);
        assert_equals(result, "error");
        done();
    });
</script>