summaryrefslogtreecommitdiffstats
path: root/testing/web-platform/tests/content-security-policy/inheritance/blob-url-in-main-window-self-navigate-inherits.sub.html
blob: 3b54528d56a445e6ef723371f5bb7a858ee016c8 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
<!DOCTYPE html>
<html>

<head>
    <script nonce="abc" src="/resources/testharness.js"></script>
    <script nonce="abc" src="/resources/testharnessreport.js"></script>
</head>

<!-- This tests that navigating a main window to a local scheme preserves the current CSP.
     We need to test this in a main window with no parent/opener so we use
     a link with target=_blank and rel=noopener. -->
<body>
    <script>
      const a = document.createElement("a")
      a.href = "support/navigate-self-to-blob.html?csp=script-src%20%27nonce-abc%27&report_id={{$id:uuid()}}";
      a.target = "_blank"
      a.rel = "noopener"
      a.click()
    </script>
    <script async defer src='../support/checkReport.sub.js?reportField=violated-directive&reportValue=script-src%20%27nonce-abc%27&reportID={{$id}}'></script>
</body>

</html>