1 files changed, 65 insertions, 0 deletions
diff --git a/testing/web-platform/meta/preload/subresource-integrity.html.ini b/testing/web-platform/meta/preload/subresource-integrity.html.ini
new file mode 100644
index 0000000000..95cda2a3ad
--- /dev/null
+++ b/testing/web-platform/meta/preload/subresource-integrity.html.ini
@@ -0,0 +1,65 @@
+[subresource-integrity.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+  [Cross-origin script, not CORS request, with hash mismatch]
+    expected: FAIL
+
+  [<crossorigin='use-credentials'> style with incorrect hash CORS-eligible]
+    expected: FAIL
+
+  [Same-origin script with sha256 match, sha512 mismatch]
+    expected: FAIL
+
+  [<crossorigin='use-credentials'> script with incorrect hash CORS-eligible]
+    expected: FAIL
+
+  [Same-origin style with sha256 match, sha512 mismatch]
+    expected: FAIL
+
+  [<crossorigin='anonymous'> script with CORS-ineligible resource]
+    expected: FAIL
+
+  [<crossorigin='anonymous'> style with incorrect hash, ACAO: *]
+    expected: FAIL
+
+  [Cross-origin style, not CORS request, with hash mismatch]
+    expected: FAIL
+
+  [Cross-origin style, not CORS request, with correct hash]
+    expected: FAIL
+
+  [<crossorigin='anonymous'> script with incorrect hash, ACAO: *]
+    expected: FAIL
+
+  [Cross-origin script, not CORS request, with correct hash]
+    expected: FAIL
+
+  [Same-origin script with incorrect hash.]
+    expected: FAIL
+
+  [Same-origin style with incorrect hash.]
+    expected: FAIL
+
+  [<crossorigin='anonymous'> style with CORS-ineligible resource]
+    expected: FAIL
+
+  [Same-origin image with sha256 match, sha512 mismatch]
+    expected: FAIL
+
+  [Same-origin image with incorrect hash.]
+    expected: FAIL
+
+  [<crossorigin='anonymous'> image with CORS-ineligible resource]
+    expected: FAIL
+
+  [Cross-origin image, not CORS request, with hash mismatch]
+    expected: FAIL
+
+  [<crossorigin='use-credentials'> image with incorrect hash CORS-eligible]
+    expected: FAIL
+
+  [Cross-origin image, not CORS request, with correct hash]
+    expected: FAIL
+
+  [<crossorigin='anonymous'> image with incorrect hash, ACAO: *]
+    expected: FAIL