testing/web-platform/meta/content-security-policy/embedded-enforcement/subsumption_algorithm-self.html.ini


1
2
3
4
5
6
7

[subsumption_algorithm-self.html]
  [Returned CSP must not allow 'self' if required CSP does not.]
    expected: FAIL

  [Returned 'self' should not be subsumed by a more secure version of origin's url.]
    expected: FAIL