blob: 0c3c36493dad7c9a4362150bca7f05d696956933 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
|
<!DOCTYPE HTML>
<html>
<head>
<meta charset="utf-8">
<title>Bug 1832249 - Consider report-only flag when upgrading insecure requests</title>
</head>
<body>
<img id="testimage"></img>
<script>
let route;
if (new URL(document.location).searchParams.get("reportonly")) {
route = "reportonly";
}
else if (new URL(document.location).searchParams.get("enforce")) {
route = "enforce";
}
var myImg = document.getElementById("testimage");
// we need to test http functionality here, so we need to load an http url
/* eslint-disable @microsoft/sdl/no-insecure-url */
myImg.src =
`http://example.com/tests/dom/security/test/csp/file_upgrade_insecure_report_only_server.sjs?img-${route}`;
/* eslint-enable @microsoft/sdl/no-insecure-url */
myImg.onload = function(e) {
window.parent.postMessage({result: `${route}-img-ok`}, "*");
};
myImg.onerror = function(e) {
window.parent.postMessage({result: `${route}-img-error`}, "*");
};
</script>
</body>
</html>
|
