eval-allowed

From 6bf0a5cb5034a7e684dcc3500e841785237ce2dd Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Sun, 7 Apr 2024 19:32:43 +0200 Subject: Adding upstream version 1:115.7.0. Signed-off-by: Daniel Baumann --- .../unsafe-eval/eval-allowed.sub.html | 27 ++++++++++ .../eval-blocked-and-sends-report.sub.html | 30 +++++++++++ .../eval-blocked-in-about-blank-iframe.html | 61 ++++++++++++++++++++++ .../unsafe-eval/eval-blocked.sub.html | 36 +++++++++++++ .../unsafe-eval/eval-in-iframe.html | 49 +++++++++++++++++ .../eval-scripts-setInterval-allowed.sub.html | 33 ++++++++++++ .../eval-scripts-setInterval-blocked.sub.html | 31 +++++++++++ .../eval-scripts-setTimeout-allowed.sub.html | 28 ++++++++++ .../eval-scripts-setTimeout-blocked.sub.html | 30 +++++++++++ .../function-constructor-allowed.sub.html | 26 +++++++++ .../function-constructor-blocked.sub.html | 30 +++++++++++ .../unsafe-eval/support/echo-eval-with-policy.py | 30 +++++++++++ 12 files changed, 411 insertions(+) create mode 100644 testing/web-platform/tests/content-security-policy/unsafe-eval/eval-allowed.sub.html create mode 100644 testing/web-platform/tests/content-security-policy/unsafe-eval/eval-blocked-and-sends-report.sub.html create mode 100644 testing/web-platform/tests/content-security-policy/unsafe-eval/eval-blocked-in-about-blank-iframe.html create mode 100644 testing/web-platform/tests/content-security-policy/unsafe-eval/eval-blocked.sub.html create mode 100644 testing/web-platform/tests/content-security-policy/unsafe-eval/eval-in-iframe.html create mode 100644 testing/web-platform/tests/content-security-policy/unsafe-eval/eval-scripts-setInterval-allowed.sub.html create mode 100644 testing/web-platform/tests/content-security-policy/unsafe-eval/eval-scripts-setInterval-blocked.sub.html create mode 100644 testing/web-platform/tests/content-security-policy/unsafe-eval/eval-scripts-setTimeout-allowed.sub.html create mode 100644 testing/web-platform/tests/content-security-policy/unsafe-eval/eval-scripts-setTimeout-blocked.sub.html create mode 100644 testing/web-platform/tests/content-security-policy/unsafe-eval/function-constructor-allowed.sub.html create mode 100644 testing/web-platform/tests/content-security-policy/unsafe-eval/function-constructor-blocked.sub.html create mode 100644 testing/web-platform/tests/content-security-policy/unsafe-eval/support/echo-eval-with-policy.py (limited to 'testing/web-platform/tests/content-security-policy/unsafe-eval') diff --git a/testing/web-platform/tests/content-security-policy/unsafe-eval/eval-allowed.sub.html b/testing/web-platform/tests/content-security-policy/unsafe-eval/eval-allowed.sub.html new file mode 100644 index 0000000000..186996311b --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/unsafe-eval/eval-allowed.sub.html @@ -0,0 +1,27 @@ + + + + + + + eval-allowed + + + + + + + + +

+ + + diff --git a/testing/web-platform/tests/content-security-policy/unsafe-eval/eval-blocked-and-sends-report.sub.html b/testing/web-platform/tests/content-security-policy/unsafe-eval/eval-blocked-and-sends-report.sub.html new file mode 100644 index 0000000000..998a616652 --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/unsafe-eval/eval-blocked-and-sends-report.sub.html @@ -0,0 +1,30 @@ + + + + + + + eval-blocked-and-sends-report + + + + + + + + +

+ + + diff --git a/testing/web-platform/tests/content-security-policy/unsafe-eval/eval-blocked-in-about-blank-iframe.html b/testing/web-platform/tests/content-security-policy/unsafe-eval/eval-blocked-in-about-blank-iframe.html new file mode 100644 index 0000000000..054e75b527 --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/unsafe-eval/eval-blocked-in-about-blank-iframe.html @@ -0,0 +1,61 @@ + + + + + + + + + + + +

+ Eval should be blocked in the iframe, but inline script should be allowed. +

+ + + + + + + diff --git a/testing/web-platform/tests/content-security-policy/unsafe-eval/eval-blocked.sub.html b/testing/web-platform/tests/content-security-policy/unsafe-eval/eval-blocked.sub.html new file mode 100644 index 0000000000..7546082ee4 --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/unsafe-eval/eval-blocked.sub.html @@ -0,0 +1,36 @@ + + + + + + + eval-blocked + + + + + + + + +

+ + + diff --git a/testing/web-platform/tests/content-security-policy/unsafe-eval/eval-in-iframe.html b/testing/web-platform/tests/content-security-policy/unsafe-eval/eval-in-iframe.html new file mode 100644 index 0000000000..bca5decd25 --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/unsafe-eval/eval-in-iframe.html @@ -0,0 +1,49 @@ + + + + + eval-in-iframe + + + + + + +

This test checks that the CSP of calleeRealm only (and not of + the callerRealm) is checked for allowing eval.

+ + + + diff --git a/testing/web-platform/tests/content-security-policy/unsafe-eval/eval-scripts-setInterval-allowed.sub.html b/testing/web-platform/tests/content-security-policy/unsafe-eval/eval-scripts-setInterval-allowed.sub.html new file mode 100644 index 0000000000..19eac79812 --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/unsafe-eval/eval-scripts-setInterval-allowed.sub.html @@ -0,0 +1,33 @@ + + + + + + + eval-scripts-setInterval-allowed + + + + + +

+
+

+ + diff --git a/testing/web-platform/tests/content-security-policy/unsafe-eval/eval-scripts-setInterval-blocked.sub.html b/testing/web-platform/tests/content-security-policy/unsafe-eval/eval-scripts-setInterval-blocked.sub.html new file mode 100644 index 0000000000..2107ab8c33 --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/unsafe-eval/eval-scripts-setInterval-blocked.sub.html @@ -0,0 +1,31 @@ + + + + + + + eval-scripts-setInterval-blocked + + + + + + + + diff --git a/testing/web-platform/tests/content-security-policy/unsafe-eval/eval-scripts-setTimeout-allowed.sub.html b/testing/web-platform/tests/content-security-policy/unsafe-eval/eval-scripts-setTimeout-allowed.sub.html new file mode 100644 index 0000000000..ba89c4e2f3 --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/unsafe-eval/eval-scripts-setTimeout-allowed.sub.html @@ -0,0 +1,28 @@ + + + + + + + eval-scripts-setTimeout-allowed + + + + + + + + diff --git a/testing/web-platform/tests/content-security-policy/unsafe-eval/eval-scripts-setTimeout-blocked.sub.html b/testing/web-platform/tests/content-security-policy/unsafe-eval/eval-scripts-setTimeout-blocked.sub.html new file mode 100644 index 0000000000..2b6335e597 --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/unsafe-eval/eval-scripts-setTimeout-blocked.sub.html @@ -0,0 +1,30 @@ + + + + + + + eval-scripts-setTimeout-blocked + + + + + + + + diff --git a/testing/web-platform/tests/content-security-policy/unsafe-eval/function-constructor-allowed.sub.html b/testing/web-platform/tests/content-security-policy/unsafe-eval/function-constructor-allowed.sub.html new file mode 100644 index 0000000000..8e6661b21c --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/unsafe-eval/function-constructor-allowed.sub.html @@ -0,0 +1,26 @@ + + + + + + + function-constructor-allowed + + + + + + + + +

+ + + diff --git a/testing/web-platform/tests/content-security-policy/unsafe-eval/function-constructor-blocked.sub.html b/testing/web-platform/tests/content-security-policy/unsafe-eval/function-constructor-blocked.sub.html new file mode 100644 index 0000000000..1a7d320b68 --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/unsafe-eval/function-constructor-blocked.sub.html @@ -0,0 +1,30 @@ + + + + + + + function-constructor-blocked + + + + + + + + +

+ + + diff --git a/testing/web-platform/tests/content-security-policy/unsafe-eval/support/echo-eval-with-policy.py b/testing/web-platform/tests/content-security-policy/unsafe-eval/support/echo-eval-with-policy.py new file mode 100644 index 0000000000..b9b3cfe03a --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/unsafe-eval/support/echo-eval-with-policy.py @@ -0,0 +1,30 @@ +def main(request, response): + policy = request.GET.first(b"policy") + return [(b"Content-Type", b"text/html"), (b"Content-Security-Policy", policy)], b""" + + + + +""" -- cgit v1.2.3