diff options
Diffstat (limited to '')
-rw-r--r-- | dom/security/test/csp/file_blob_top_nav_block_modals.html | 18 | ||||
-rw-r--r-- | dom/security/test/csp/file_blob_top_nav_block_modals.html^headers^ | 1 |
2 files changed, 19 insertions, 0 deletions
diff --git a/dom/security/test/csp/file_blob_top_nav_block_modals.html b/dom/security/test/csp/file_blob_top_nav_block_modals.html new file mode 100644 index 0000000000..545f6cffff --- /dev/null +++ b/dom/security/test/csp/file_blob_top_nav_block_modals.html @@ -0,0 +1,18 @@ +<!DOCTYPE HTML> +<html> +<head> + <meta charset="utf-8"> +</head> +<body> +<script> + // If the alert box is blocked correctly by the CSP then postMessage will + // send the message and test passes. + var text = "<script>alert(document.domain);window.opener.postMessage("+ + "{\"test\": \"block_top_nav_alert_test\", \"msg\": "+ + "\"blob top nav alert blocked by CSP\"}, \"*\")<\/script>"; + var blob = new Blob([text], {type : 'text/html'}); + var url = URL.createObjectURL(blob); + location.href=url; +</script> +</body> +</html>
\ No newline at end of file diff --git a/dom/security/test/csp/file_blob_top_nav_block_modals.html^headers^ b/dom/security/test/csp/file_blob_top_nav_block_modals.html^headers^ new file mode 100644 index 0000000000..e2d945d556 --- /dev/null +++ b/dom/security/test/csp/file_blob_top_nav_block_modals.html^headers^ @@ -0,0 +1 @@ +Content-Security-Policy: sandbox allow-scripts;
\ No newline at end of file |