dom/security/test/csp/file_meta_whitespace_skipping.html


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

<!DOCTYPE HTML>
<html>
<head>
  <meta charset="utf-8">
  <!-- Test all the different space characters within the meta csp:
       * U+0020 space           | &#x20;
       * U+0009 tab             | &#x9;        
       * U+000A line feed       | &#xa;  
       * U+000C form feed       | &#xc;
       * U+000D carriage return | &#xd;
    !-->
  <meta http-equiv="Content-Security-Policy"
        content= "
        img-src&#x20;       'none'; &#x20;
        script-src 'unsafe-inline'  &#xd;
        ;
        style-src&#x9;&#x9;     https://example.com&#xa;
        https://foo.com;&#xc;;;;&#xc;;;&#xc;     child-src    foo.com
        bar.com
            &#xd;;&#xd;
                     font-src 'none'">
  <title>Bug 1261634 - Update whitespace skipping for meta csp</title>
</head>
<body>
  <script type="application/javascript">
    // notify the including document that we are done parsing the meta csp
    window.parent.postMessage({result: "meta-csp-parsed"}, "*");
  </script>

</body>
</html>