зеркало из https://github.com/mozilla/gecko-dev.git
Bug 1007634 - Add a test to show that Worker construction is no longer allowed by CSP script-src directive. r=ckerschb
--HG-- extra : amend_source : 0acea47a18c3a40be6e7fe50db1c71bc9dd91b3a
This commit is contained in:
Родитель
e2fe0b8f62
Коммит
66aa150bc3
|
@ -79,6 +79,24 @@
|
|||
result : "blocked",
|
||||
policy : "default-src 'none'; script-src 'unsafe-inline'; child-src https://www.example.org"
|
||||
},
|
||||
'script-src-worker': {
|
||||
id: "script-src-worker",
|
||||
file: WORKER_TEST_FILE,
|
||||
result : "blocked",
|
||||
policy : "default-src 'none'; script-src 'self' 'unsafe-inline'"
|
||||
},
|
||||
'script-src-service_worker': {
|
||||
id: "script-src-service_worker",
|
||||
file: SERVICE_WORKER_TEST_FILE,
|
||||
result : "blocked",
|
||||
policy : "default-src 'none'; script-src 'self' 'unsafe-inline'"
|
||||
},
|
||||
'script-src-self-shared_worker': {
|
||||
id: "script-src-self-shared_worker",
|
||||
file: SHARED_WORKER_TEST_FILE,
|
||||
result : "blocked",
|
||||
policy : "default-src 'none'; script-src 'self' 'unsafe-inline'"
|
||||
},
|
||||
};
|
||||
|
||||
finished = {};
|
||||
|
|
Загрузка…
Ссылка в новой задаче