mirror of
https://github.com/servo/servo.git
synced 2025-08-07 14:35:33 +01:00
Update web-platform-tests to revision 0d318188757a9c996e20b82db201fd04de5aa255
This commit is contained in:
parent
b2a5225831
commit
1a81b18b9f
12321 changed files with 544385 additions and 6 deletions
|
@ -0,0 +1,56 @@
|
|||
<!DOCTYPE HTML>
|
||||
<html>
|
||||
<head>
|
||||
<title>Objects loaded using data attribute of <object> tag are blocked unless their host is listed as an allowed source in the object-src directive</title>
|
||||
<script src='/resources/testharness.js'></script>
|
||||
<script src='/resources/testharnessreport.js'></script>
|
||||
</head>
|
||||
<body onLoad="object_loaded()">
|
||||
<h1>Objects loaded using data attribute of <object> tag are blocked unless their host is listed as an allowed source in the object-src directive</h1>
|
||||
<div id="log"></div>
|
||||
|
||||
<script>
|
||||
var relativeMediaURL = "/support/media/flash.swf";
|
||||
var pageURL = window.location.toString();
|
||||
var temp1 = pageURL.split("//");
|
||||
var temp2 = temp1[1].substring (0, temp1[1].lastIndexOf("/object-src/"));
|
||||
var mediaURL = "http://www2." + temp2 + relativeMediaURL;
|
||||
var htmlStr = "<object id='flashObject' type='application/x-shockwave-flash' data='" + mediaURL + "' width='200' height='200'></object>";
|
||||
document.write (htmlStr);
|
||||
</script>
|
||||
|
||||
<script>
|
||||
var len = navigator.mimeTypes.length;
|
||||
var allTypes = "";
|
||||
var flashMimeType = "application/x-shockwave-flash";
|
||||
for ( var i=0;i<len;i++ ) {
|
||||
allTypes+=navigator.mimeTypes[i].type;
|
||||
}
|
||||
|
||||
var hasMimeType = allTypes.indexOf(flashMimeType) != -1;
|
||||
|
||||
<!-- The actual test. -->
|
||||
var test1 = async_test("Async SWF load test")
|
||||
|
||||
function object_loaded() {
|
||||
var elem = document.getElementById("flashObject");
|
||||
var is_loaded = false;
|
||||
try {
|
||||
<!-- The Flash Player exposes values to JavaScript if a SWF has successfully been loaded. -->
|
||||
var pct_loaded = elem.PercentLoaded();
|
||||
is_loaded = true;
|
||||
} catch (e) {}
|
||||
|
||||
if (hasMimeType) {
|
||||
test1.step(function() {assert_false(is_loaded, "External object loaded.")});
|
||||
} else {
|
||||
test1.step(function() {assert_true(hasMimeType, "No Flash Player, cannot run test.")});
|
||||
}
|
||||
test1.done();
|
||||
}
|
||||
</script>
|
||||
|
||||
<script async defer src="../support/checkReport.sub.js?reportField=violated-directive&reportValue=object-src%20%27self%27"></script>
|
||||
|
||||
</body>
|
||||
</html>
|
|
@ -0,0 +1,6 @@
|
|||
Expires: Mon, 26 Jul 1997 05:00:00 GMT
|
||||
Cache-Control: no-store, no-cache, must-revalidate
|
||||
Cache-Control: post-check=0, pre-check=0, false
|
||||
Pragma: no-cache
|
||||
Set-Cookie: object-src-2_1={{$id:uuid()}}; Path=/content-security-policy/object-src/
|
||||
Content-Security-Policy: script-src * 'unsafe-inline'; object-src 'self'; report-uri ../support/report.py?op=put&reportID={{$id}}
|
|
@ -0,0 +1,56 @@
|
|||
<!DOCTYPE HTML>
|
||||
<html>
|
||||
<head>
|
||||
<title>Objects loaded using src attribute of <embed> tag are blocked unless their host is listed as an allowed source in the object-src directive</title>
|
||||
<script src='/resources/testharness.js'></script>
|
||||
<script src='/resources/testharnessreport.js'></script>
|
||||
</head>
|
||||
<body onLoad="object_loaded()">
|
||||
<h1>Objects loaded using src attribute of <embed> tag are blocked unless their host is listed as an allowed source in the object-src directive</h1>
|
||||
<div id="log"></div>
|
||||
|
||||
<script>
|
||||
var relativeMediaURL = "/support/media/flash.swf";
|
||||
var pageURL = window.location.toString();
|
||||
var temp1 = pageURL.split("//");
|
||||
var temp2 = temp1[1].substring (0, temp1[1].lastIndexOf("/object-src/"));
|
||||
var mediaURL = "http://www2." + temp2 + relativeMediaURL;
|
||||
var htmlStr = "<embed id='flashObject' type='application/x-shockwave-flash' src='" + mediaURL + "' width='200' height='200'></object>";
|
||||
document.write (htmlStr);
|
||||
</script>
|
||||
|
||||
<script>
|
||||
var len = navigator.mimeTypes.length;
|
||||
var allTypes = "";
|
||||
var flashMimeType = "application/x-shockwave-flash";
|
||||
for ( var i=0;i<len;i++ ) {
|
||||
allTypes+=navigator.mimeTypes[i].type;
|
||||
}
|
||||
|
||||
var hasMimeType = allTypes.indexOf(flashMimeType) != -1;
|
||||
|
||||
<!-- The actual test. -->
|
||||
var test1 = async_test("Async SWF load test")
|
||||
|
||||
function object_loaded() {
|
||||
var elem = document.getElementById("flashObject");
|
||||
var is_loaded = false;
|
||||
try {
|
||||
<!-- The Flash Player exposes values to JavaScript if a SWF has successfully been loaded. -->
|
||||
var pct_loaded = elem.PercentLoaded();
|
||||
is_loaded = true;
|
||||
} catch (e) {}
|
||||
|
||||
if (hasMimeType) {
|
||||
test1.step(function() {assert_false(is_loaded, "External object loaded.")});
|
||||
} else {
|
||||
test1.step(function() {assert_true(hasMimeType, "No Flash Player, cannot run test.")});
|
||||
}
|
||||
test1.done();
|
||||
}
|
||||
</script>
|
||||
|
||||
<script async defer src="../support/checkReport.sub.js?reportField=violated-directive&reportValue=object-src%20%27self%27"></script>
|
||||
|
||||
</body>
|
||||
</html>
|
|
@ -0,0 +1,6 @@
|
|||
Expires: Mon, 26 Jul 1997 05:00:00 GMT
|
||||
Cache-Control: no-store, no-cache, must-revalidate
|
||||
Cache-Control: post-check=0, pre-check=0, false
|
||||
Pragma: no-cache
|
||||
Set-Cookie: object-src-2_2={{$id:uuid()}}; Path=/content-security-policy/object-src/
|
||||
Content-Security-Policy: script-src * 'unsafe-inline'; object-src 'self'; report-uri ../support/report.py?op=put&reportID={{$id}}
|
Loading…
Add table
Add a link
Reference in a new issue