From 26a029d407be480d791972afb5975cf62c9360a6 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Fri, 19 Apr 2024 02:47:55 +0200 Subject: Adding upstream version 124.0.1. Signed-off-by: Daniel Baumann --- .../content-security-policy/svg/including.sub.svg | 19 ++++++++ .../svg/including.sub.svg.sub.headers | 6 +++ .../svg/object-in-svg-foreignobject.sub.html | 27 ++++++++++++ .../tests/content-security-policy/svg/scripted.svg | 20 +++++++++ .../svg/scripted.svg.sub.headers | 6 +++ .../content-security-policy/svg/svg-from-guid.html | 51 ++++++++++++++++++++++ .../svg/svg-inline.sub.html | 41 +++++++++++++++++ .../svg/svg-policy-resource-doc-includes.html | 29 ++++++++++++ .../svg/svg-policy-with-resource.html | 30 +++++++++++++ 9 files changed, 229 insertions(+) create mode 100644 testing/web-platform/tests/content-security-policy/svg/including.sub.svg create mode 100644 testing/web-platform/tests/content-security-policy/svg/including.sub.svg.sub.headers create mode 100644 testing/web-platform/tests/content-security-policy/svg/object-in-svg-foreignobject.sub.html create mode 100644 testing/web-platform/tests/content-security-policy/svg/scripted.svg create mode 100644 testing/web-platform/tests/content-security-policy/svg/scripted.svg.sub.headers create mode 100644 testing/web-platform/tests/content-security-policy/svg/svg-from-guid.html create mode 100644 testing/web-platform/tests/content-security-policy/svg/svg-inline.sub.html create mode 100644 testing/web-platform/tests/content-security-policy/svg/svg-policy-resource-doc-includes.html create mode 100644 testing/web-platform/tests/content-security-policy/svg/svg-policy-with-resource.html (limited to 'testing/web-platform/tests/content-security-policy/svg') diff --git a/testing/web-platform/tests/content-security-policy/svg/including.sub.svg b/testing/web-platform/tests/content-security-policy/svg/including.sub.svg new file mode 100644 index 0000000000..51215d9044 --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/svg/including.sub.svg @@ -0,0 +1,19 @@ + + + + using SVG as a resource doc should apply this doc's CSP + + + + + + + PASS + + diff --git a/testing/web-platform/tests/content-security-policy/svg/including.sub.svg.sub.headers b/testing/web-platform/tests/content-security-policy/svg/including.sub.svg.sub.headers new file mode 100644 index 0000000000..0f3f281d90 --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/svg/including.sub.svg.sub.headers @@ -0,0 +1,6 @@ +Expires: Mon, 26 Jul 1997 05:00:00 GMT +Cache-Control: no-store, no-cache, must-revalidate +Cache-Control: post-check=0, pre-check=0, false +Pragma: no-cache +Set-Cookie: including={{$id:uuid()}}; Path=/content-security-policy/svg +Content-Security-Policy: script-src 'none'; diff --git a/testing/web-platform/tests/content-security-policy/svg/object-in-svg-foreignobject.sub.html b/testing/web-platform/tests/content-security-policy/svg/object-in-svg-foreignobject.sub.html new file mode 100644 index 0000000000..aa4f156953 --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/svg/object-in-svg-foreignobject.sub.html @@ -0,0 +1,27 @@ + + + + Object inside SVG foreignobject respect csp + + + + + + + + + + + + + diff --git a/testing/web-platform/tests/content-security-policy/svg/scripted.svg b/testing/web-platform/tests/content-security-policy/svg/scripted.svg new file mode 100644 index 0000000000..5482831fa8 --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/svg/scripted.svg @@ -0,0 +1,20 @@ + + + + Example script01 - redirect + + + + + + + PASS + + diff --git a/testing/web-platform/tests/content-security-policy/svg/scripted.svg.sub.headers b/testing/web-platform/tests/content-security-policy/svg/scripted.svg.sub.headers new file mode 100644 index 0000000000..0e90e147ad --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/svg/scripted.svg.sub.headers @@ -0,0 +1,6 @@ +Expires: Mon, 26 Jul 1997 05:00:00 GMT +Cache-Control: no-store, no-cache, must-revalidate +Cache-Control: post-check=0, pre-check=0, false +Pragma: no-cache +Set-Cookie: scripted={{$id:uuid()}}; Path=/content-security-policy/svg +Content-Security-Policy: script-src 'none'; diff --git a/testing/web-platform/tests/content-security-policy/svg/svg-from-guid.html b/testing/web-platform/tests/content-security-policy/svg/svg-from-guid.html new file mode 100644 index 0000000000..962cd88036 --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/svg/svg-from-guid.html @@ -0,0 +1,51 @@ + + + + svg-from-guid + + + + + + + + +

Tests that an SVG loaded in an iframe with a policy enforces it, not + the policy enforced by this parent frame. The SVG should render and + not redirect to a different resource.

+ + +
+ + + diff --git a/testing/web-platform/tests/content-security-policy/svg/svg-inline.sub.html b/testing/web-platform/tests/content-security-policy/svg/svg-inline.sub.html new file mode 100644 index 0000000000..16d03407fd --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/svg/svg-inline.sub.html @@ -0,0 +1,41 @@ + + + + svg-policy-with-resource + + + + + + + + +

Tests that an SVG loaded in an iframe with a policy enforces it, not + the policy enforced by this parent frame. The SVG should render and + not redirect to a different resource.

+
+ + + + + + + + + + PASS + + + + diff --git a/testing/web-platform/tests/content-security-policy/svg/svg-policy-resource-doc-includes.html b/testing/web-platform/tests/content-security-policy/svg/svg-policy-resource-doc-includes.html new file mode 100644 index 0000000000..3ca6262405 --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/svg/svg-policy-resource-doc-includes.html @@ -0,0 +1,29 @@ + + + + svg-policy-with-resource + + + + + + + + +

Tests that an SVG loaded in an iframe with a policy enforces it, not + the policy enforced by this parent frame. The SVG should render and + not redirect to a different resource.

+ +
+ + + diff --git a/testing/web-platform/tests/content-security-policy/svg/svg-policy-with-resource.html b/testing/web-platform/tests/content-security-policy/svg/svg-policy-with-resource.html new file mode 100644 index 0000000000..88ba0b3e65 --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/svg/svg-policy-with-resource.html @@ -0,0 +1,30 @@ + + + + svg-policy-with-resource + + + + + + + + +

Tests that an SVG loaded in an iframe with a policy enforces it, not + the policy enforced by this parent frame. The SVG should render and + not redirect to a different resource.

+ + +
+ + + -- cgit v1.2.3