summaryrefslogtreecommitdiffstats
path: root/testing/web-platform/tests/content-security-policy/unsafe-eval/support
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-07 09:22:09 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-07 09:22:09 +0000
commit43a97878ce14b72f0981164f87f2e35e14151312 (patch)
tree620249daf56c0258faa40cbdcf9cfba06de2a846 /testing/web-platform/tests/content-security-policy/unsafe-eval/support
parentInitial commit. (diff)
downloadfirefox-43a97878ce14b72f0981164f87f2e35e14151312.tar.xz
firefox-43a97878ce14b72f0981164f87f2e35e14151312.zip
Adding upstream version 110.0.1.upstream/110.0.1upstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'testing/web-platform/tests/content-security-policy/unsafe-eval/support')
-rw-r--r--testing/web-platform/tests/content-security-policy/unsafe-eval/support/echo-eval-with-policy.py30
1 files changed, 30 insertions, 0 deletions
diff --git a/testing/web-platform/tests/content-security-policy/unsafe-eval/support/echo-eval-with-policy.py b/testing/web-platform/tests/content-security-policy/unsafe-eval/support/echo-eval-with-policy.py
new file mode 100644
index 0000000000..b9b3cfe03a
--- /dev/null
+++ b/testing/web-platform/tests/content-security-policy/unsafe-eval/support/echo-eval-with-policy.py
@@ -0,0 +1,30 @@
+def main(request, response):
+ policy = request.GET.first(b"policy")
+ return [(b"Content-Type", b"text/html"), (b"Content-Security-Policy", policy)], b"""
+<!DOCTYPE html>
+<html>
+<script>
+function check_eval(context) {
+ context.eval_check_variable = 0;
+ try {
+ id = context.eval("eval_check_variable + 1");
+ } catch (e) {
+ if (e instanceof EvalError) {
+ if (context.eval_check_variable === 0)
+ return "blocked";
+ else
+ return "EvalError exception, but eval was executed";
+ } else {
+ return "Unexpected exception: " + e.message;
+ }
+ }
+ return "allowed";
+}
+
+window.parent.postMessage({
+ evalInIframe: check_eval(window),
+ evalInParent: check_eval(parent),
+});
+</script>
+</html>
+"""