diff options
| author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-07 17:32:43 +0000 |
|---|---|---|
| committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-07 17:32:43 +0000 |
| commit | 6bf0a5cb5034a7e684dcc3500e841785237ce2dd (patch) | |
| tree | a68f146d7fa01f0134297619fbe7e33db084e0aa /testing/web-platform/tests/content-security-policy/unsafe-eval/support | |
| parent | Initial commit. (diff) | |
| download | thunderbird-6bf0a5cb5034a7e684dcc3500e841785237ce2dd.tar.xz thunderbird-6bf0a5cb5034a7e684dcc3500e841785237ce2dd.zip | |
Adding upstream version 1:115.7.0.upstream/1%115.7.0upstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'testing/web-platform/tests/content-security-policy/unsafe-eval/support')
| -rw-r--r-- | testing/web-platform/tests/content-security-policy/unsafe-eval/support/echo-eval-with-policy.py | 30 |
1 files changed, 30 insertions, 0 deletions
diff --git a/testing/web-platform/tests/content-security-policy/unsafe-eval/support/echo-eval-with-policy.py b/testing/web-platform/tests/content-security-policy/unsafe-eval/support/echo-eval-with-policy.py new file mode 100644 index 0000000000..b9b3cfe03a --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/unsafe-eval/support/echo-eval-with-policy.py @@ -0,0 +1,30 @@ +def main(request, response): + policy = request.GET.first(b"policy") + return [(b"Content-Type", b"text/html"), (b"Content-Security-Policy", policy)], b""" +<!DOCTYPE html> +<html> +<script> +function check_eval(context) { + context.eval_check_variable = 0; + try { + id = context.eval("eval_check_variable + 1"); + } catch (e) { + if (e instanceof EvalError) { + if (context.eval_check_variable === 0) + return "blocked"; + else + return "EvalError exception, but eval was executed"; + } else { + return "Unexpected exception: " + e.message; + } + } + return "allowed"; +} + +window.parent.postMessage({ + evalInIframe: check_eval(window), + evalInParent: check_eval(parent), +}); +</script> +</html> +""" |