21 lines
640 B
HTML
21 lines
640 B
HTML
<!DOCTYPE HTML>
|
|
<html>
|
|
<head>
|
|
<title>Bug 1457100: Test OBJECT inherits CSP if needed</title>
|
|
<meta charset="utf-8">
|
|
<meta http-equiv="Content-Security-Policy" content= "img-src https://bug1457100.test.com"/>
|
|
</head>
|
|
<body>
|
|
<object id="dataObject" data="data:text/html,object<script>var foo = 0;</script>"></object>
|
|
|
|
<script type="application/javascript">
|
|
var dataObject = document.getElementById("dataObject");
|
|
dataObject.onload = function () {
|
|
var contentDoc = SpecialPowers.wrap(dataObject).contentDocument;
|
|
var cspJSON = contentDoc.cspJSON;
|
|
window.parent.postMessage({cspJSON}, "*");
|
|
}
|
|
</script>
|
|
|
|
</body>
|
|
</html>
|