summaryrefslogtreecommitdiffstats
path: root/testing/web-platform/tests/content-security-policy/font-src/font-stylesheet-font-blocked.sub.html
blob: 4b34bc5746d438362aa2ae11c7714a91993d51b5 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
<!doctype html>
<meta charset=utf-8>
<meta http-equiv="Content-Security-Policy" content="font-src 'none'">
<head>
  <title>Test font does not load if it does not match font-src.</title>
  <script src='/resources/testharness.js'></script>
  <script src='/resources/testharnessreport.js'></script>
</head>
<body>
  <div id="log"></div>
  <script>
    async_test(function(t) {
      var link = document.createElement('link');
      link.rel="stylesheet";
      link.type="text/css";
      link.href="/content-security-policy/support/fonts.css";
      // The stylesheet should stil load, even though the font contained does not
      link.onerror = t.unreached_func("Should have loaded the stylesheet.");
      document.addEventListener("securitypolicyviolation", t.step_func_done(function(e) {
        assert_equals(e.violatedDirective, "font-src");
      }));
      document.getElementsByTagName('head')[0].appendChild(link);
    }, "Test font does not load if it does not match font-src.");
  </script>
</body>