1 files changed, 56 insertions, 0 deletions
diff --git a/dom/security/test/csp/test_blocked_uri_in_violation_event_after_redirects.html b/dom/security/test/csp/test_blocked_uri_in_violation_event_after_redirects.html
new file mode 100644
index 0000000000..6965cbeb92
--- /dev/null
+++ b/dom/security/test/csp/test_blocked_uri_in_violation_event_after_redirects.html
@@ -0,0 +1,56 @@
+<!DOCTYPE HTML>
+<html>
+<head>
+  <title>Bug 1542194 - Check blockedURI in violation reports after redirects</title>
+  <script src="/tests/SimpleTest/SimpleTest.js"></script>
+  <link rel="stylesheet" type="text/css" href="/tests/SimpleTest/test.css" />
+</head>
+<body>
+
+<iframe id='testframe'></iframe>
+
+<script class="testbody" type="text/javascript">
+
+SimpleTest.waitForExplicitFinish();
+
+let seenViolations = 0;
+let expectedViolations = 3;
+
+window.addEventListener("message", receiveMessage);
+function receiveMessage(event) {
+
+  seenViolations++;
+
+  let blockedURI = event.data.blockedURI;
+
+  if (blockedURI.includes("test1")) {
+    is(blockedURI,
+       "http://example.com/tests/dom/security/test/csp/file_blocked_uri_in_violation_event_after_redirects.sjs?test1a",
+       "Test 1 should be the URI before redirect");
+  } else if (blockedURI.includes("test2")) {
+    is(blockedURI,
+      "http://test2.example.com",
+      "Test 2 should be the redirected pre-path URI");
+  } else if (blockedURI.includes("test3")) {
+    is(blockedURI,
+      "http://test3.example.com",
+      "Test 3 should be the redirected pre-path URI");
+  } else {
+  	ok(false, "sanity: how can we end up here?");
+  }
+
+  if (seenViolations < expectedViolations) {
+  	return;
+  }
+
+  window.removeEventListener("message", receiveMessage);
+  SimpleTest.finish();
+}
+
+let testframe = document.getElementById("testframe");
+// This has to be same-origin with the test1 URL.
+testframe.src = "http://example.com/tests/dom/security/test/csp/file_blocked_uri_in_violation_event_after_redirects.html";
+
+</script>
+</body>
+</html>