summaryrefslogtreecommitdiffstats
path: root/testing/web-platform/tests/content-security-policy/script-src/worker-data-set-timeout.sub.html
blob: ac4b608b08c4ed3867f587847cc699a91cedc5c4 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
<!DOCTYPE html>
<html>

<head>
    <!-- We add two CSP entries on purpose. The first one does nothing
    for the purpose of this test, but we want to check that both are
    inherited -->
    <meta http-equiv="Content-Security-Policy" content="object-src: 'none'">
    <meta http-equiv="Content-Security-Policy" content="script-src data: 'self' 'unsafe-inline'; connect-src 'self';">
    <title>worker-data-set-timeout</title>
    <script src="/resources/testharness.js"></script>
    <script src="/resources/testharnessreport.js"></script>
    <script src='../support/testharness-helper.js'></script>
</head>

<body>
    <script>
      fetch('./support/worker-with-script-src-none-set-timeout.js')
       .then(data => data.text())
       .then(
           text => assert_shared_worker_is_loaded(
               `data:text/javascript,${text}`,
               "Shared worker with data: url inherits CSP",
               "setTimeout blocked"));
    </script>
</body>

</html>