// custom *.sjs for Bug 1195172 // CSP: 'block-all-mixed-content' const PRE_HEAD = "" + '' + "Bug 1195172 - CSP should block font from cache"; const CSP_BLOCK = ''; const CSP_ALLOW = ''; const CSS = ""; const POST_HEAD_AND_BODY = "" + "" + "
Just testing the font
" + "" + ""; function handleRequest(request, response) { // avoid confusing cache behaviors response.setHeader("Cache-Control", "no-cache", false); var queryString = request.queryString; if (queryString == "baseline") { response.write(PRE_HEAD + POST_HEAD_AND_BODY); return; } if (queryString == "no-csp") { response.write(PRE_HEAD + CSS + POST_HEAD_AND_BODY); return; } if (queryString == "csp-block") { response.write(PRE_HEAD + CSP_BLOCK + CSS + POST_HEAD_AND_BODY); return; } if (queryString == "csp-allow") { response.write(PRE_HEAD + CSP_ALLOW + CSS + POST_HEAD_AND_BODY); return; } // we should never get here, but just in case return something unexpected response.write("do'h"); }