blob: 8463a2eaf141796b8bf67dd12eb8d031e0c182c2 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
|
<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Security-Policy" content="
default-src 'none';
script-src blob: 'nonce-abc'">
<script nonce="abc" src="/resources/testharness.js"></script>
<script nonce="abc" src="/resources/testharnessreport.js"></script>
</head>
<script nonce="abc">
async_test(t => {
var script = document.createElement("script");
script.onerror = () => assert_unreached("FAIL should not have fired error event.");
script.onload = () => t.done();
script.src = URL.createObjectURL(new Blob(["alert('PASS executed blob URL script.');"]));
document.head.appendChild(script);
}, "blob: URL inherits CSP from a meta tag whose contents have newline characters.");
</script>
</html>
|
