1 files changed, 25 insertions, 0 deletions
diff --git a/testing/web-platform/tests/content-security-policy/embedded-enforcement/support/echo-policy-multiple.py b/testing/web-platform/tests/content-security-policy/embedded-enforcement/support/echo-policy-multiple.py
new file mode 100644
index 0000000000..b91bf0d5ea
--- /dev/null
+++ b/testing/web-platform/tests/content-security-policy/embedded-enforcement/support/echo-policy-multiple.py
@@ -0,0 +1,25 @@
+def main(request, response):
+    headers = [(b"Content-Type", b"text/html")]
+    if b"policy" in request.GET:
+        headers.append((b"Content-Security-Policy", request.GET[b"policy"]))
+    if b"policy2" in request.GET:
+        headers.append((b"Content-Security-Policy", request.GET[b"policy2"]))
+    if b"policy3" in request.GET:
+        headers.append((b"Content-Security-Policy", request.GET[b"policy3"]))
+    message = request.GET[b"id"]
+    return headers, b'''
+<!DOCTYPE html>
+<html>
+<head>
+    <title>This page sets given CSP upon itself.</title>
+</head>
+<body>
+    <script nonce="abc">
+        var response = {};
+        response["id"] = "%s";
+        response["loaded"] = true;
+        window.top.postMessage(response, '*');
+    </script>
+</body>
+</html>
+''' % (message)