21 lines
822 B
HTML
21 lines
822 B
HTML
<!DOCTYPE html>
|
|
<title>script-src blocks Wasm execution</title>
|
|
<meta http-equiv="Content-Security-Policy" content="script-src 'self' 'unsafe-inline';">
|
|
<script src="/resources/testharness.js"></script>
|
|
<script src="/resources/testharnessreport.js"></script>
|
|
<script>
|
|
setup({allow_uncaught_exception: true});
|
|
|
|
const test_load = async_test(
|
|
"Importing a WebAssembly module should be guarded by script-src CSP.");
|
|
|
|
window.log = [];
|
|
document.addEventListener("securitypolicyviolation", (e) => {
|
|
window.log.push(e.violatedDirective);
|
|
});
|
|
|
|
window.addEventListener("load", test_load.step_func_done(ev => {
|
|
assert_array_equals(log, ["script-src-elem"]);
|
|
}));
|
|
</script>
|
|
<script type="module" src="https://{{hosts[alt][]}}:{{ports[https][0]}}/resources/execute-start.wasm"></script>
|