Title: [246287] trunk/LayoutTests
- Revision
- 246287
- Author
- [email protected]
- Date
- 2019-06-10 15:36:24 -0700 (Mon, 10 Jun 2019)
Log Message
[CSP] Blob URLs should inherit their CSP policy
https://bugs.webkit.org/show_bug.cgi?id=198579
<rdar://problem/51366878>
Reviewed by Brent Fulgham.
Actually add the tests that I inadvertently omitted from r246277.
* http/tests/security/contentSecurityPolicy/navigate-self-to-blob-expected.txt: Added.
* http/tests/security/contentSecurityPolicy/navigate-self-to-blob.html: Added.
* http/tests/security/contentSecurityPolicy/navigate-self-to-data-url-expected.txt: Added.
* http/tests/security/contentSecurityPolicy/navigate-self-to-data-url.html: Added.
Modified Paths
Added Paths
Diff
Modified: trunk/LayoutTests/ChangeLog (246286 => 246287)
--- trunk/LayoutTests/ChangeLog 2019-06-10 22:18:53 UTC (rev 246286)
+++ trunk/LayoutTests/ChangeLog 2019-06-10 22:36:24 UTC (rev 246287)
@@ -1,3 +1,18 @@
+2019-06-10 Daniel Bates <[email protected]>
+
+ [CSP] Blob URLs should inherit their CSP policy
+ https://bugs.webkit.org/show_bug.cgi?id=198579
+ <rdar://problem/51366878>
+
+ Reviewed by Brent Fulgham.
+
+ Actually add the tests that I inadvertently omitted from r246277.
+
+ * http/tests/security/contentSecurityPolicy/navigate-self-to-blob-expected.txt: Added.
+ * http/tests/security/contentSecurityPolicy/navigate-self-to-blob.html: Added.
+ * http/tests/security/contentSecurityPolicy/navigate-self-to-data-url-expected.txt: Added.
+ * http/tests/security/contentSecurityPolicy/navigate-self-to-data-url.html: Added.
+
2019-06-10 Sam Weinig <[email protected]>
Remove Dashboard support
Added: trunk/LayoutTests/http/tests/security/contentSecurityPolicy/navigate-self-to-blob-expected.txt (0 => 246287)
--- trunk/LayoutTests/http/tests/security/contentSecurityPolicy/navigate-self-to-blob-expected.txt (rev 0)
+++ trunk/LayoutTests/http/tests/security/contentSecurityPolicy/navigate-self-to-blob-expected.txt 2019-06-10 22:36:24 UTC (rev 246287)
@@ -0,0 +1,2 @@
+CONSOLE MESSAGE: line 1: Refused to execute a script because its hash, its nonce, or 'unsafe-inline' does not appear in the script-src directive of the Content Security Policy.
+Blob page
Added: trunk/LayoutTests/http/tests/security/contentSecurityPolicy/navigate-self-to-blob.html (0 => 246287)
--- trunk/LayoutTests/http/tests/security/contentSecurityPolicy/navigate-self-to-blob.html (rev 0)
+++ trunk/LayoutTests/http/tests/security/contentSecurityPolicy/navigate-self-to-blob.html 2019-06-10 22:36:24 UTC (rev 246287)
@@ -0,0 +1,17 @@
+<!DOCTYPE html>
+<html>
+<head>
+<meta http-equiv="Content-Security-Policy" content="script-src 'nonce-test'">
+<script nonce="test">
+if (window.testRunner)
+ testRunner.dumpAsText();
+
+let blob = new Blob(["<script>alert(/FAIL/)<" + "/script>Blob page"], {type : "text/html"});
+if (window.testRunner)
+ testRunner.queueLoad(URL.createObjectURL(blob));
+</script>
+<body>
+<p>Initial page</p>
+</body>
+</head>
+</html>
Added: trunk/LayoutTests/http/tests/security/contentSecurityPolicy/navigate-self-to-data-url-expected.txt (0 => 246287)
--- trunk/LayoutTests/http/tests/security/contentSecurityPolicy/navigate-self-to-data-url-expected.txt (rev 0)
+++ trunk/LayoutTests/http/tests/security/contentSecurityPolicy/navigate-self-to-data-url-expected.txt 2019-06-10 22:36:24 UTC (rev 246287)
@@ -0,0 +1,2 @@
+CONSOLE MESSAGE: line 1: Refused to execute a script because its hash, its nonce, or 'unsafe-inline' does not appear in the script-src directive of the Content Security Policy.
+Data URL page
Added: trunk/LayoutTests/http/tests/security/contentSecurityPolicy/navigate-self-to-data-url.html (0 => 246287)
--- trunk/LayoutTests/http/tests/security/contentSecurityPolicy/navigate-self-to-data-url.html (rev 0)
+++ trunk/LayoutTests/http/tests/security/contentSecurityPolicy/navigate-self-to-data-url.html 2019-06-10 22:36:24 UTC (rev 246287)
@@ -0,0 +1,16 @@
+<!DOCTYPE html>
+<html>
+<head>
+<meta http-equiv="Content-Security-Policy" content="script-src 'nonce-test'">
+<script nonce="test">
+if (window.testRunner)
+ testRunner.dumpAsText();
+
+if (window.testRunner)
+ testRunner.queueLoad("data:text/html, <script>alert(/FAIL/)<" + "/script>Data URL page");
+</script>
+<body>
+<p>Initial page</p>
+</body>
+</head>
+</html>
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
