summaryrefslogtreecommitdiffstats
path: root/dom/security/test/csp/file_strict_dynamic_js_url.html
blob: bd53b0adb2107903219c30b337e0a5cf3b8bb12a (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
<!DOCTYPE HTML>
<html>
<head>
  <title>Bug 1316826 - 'strict-dynamic' blocking DOM event handlers</title>
</head>
<body>
<div id="testdiv">blocked</div>

<a id="jslink" href='javascript:document.getElementById("testdiv").innerHTML = "allowed"'>click me</a>
<script nonce="foo">
  document.getElementById("jslink").click();
</script>

</body>
</html>