Run subset of CSP tests by default. (#36402)

This will establish a baseline for the changes from #36363.

Testing: New tests in CI.
Fixes: Part of #4577

Signed-off-by: Josh Matthews <josh@joshmatthews.net>
This commit is contained in:
Josh Matthews 2025-04-08 10:46:25 -04:00 committed by GitHub
parent 95eedb997a
commit ce4ca9ee98
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
48 changed files with 333 additions and 0 deletions

View file

@ -0,0 +1,3 @@
[child-src-blocked.sub.html]
[Expecting logs: ["PASS IFrame #1 generated a load event.", "violated-directive=frame-src"\]]
expected: FAIL

View file

@ -0,0 +1,3 @@
[child-src-conflicting-frame-src.sub.html]
[Expecting logs: ["PASS IFrame #1 generated a load event.", "violated-directive=frame-src"\]]
expected: FAIL

View file

@ -0,0 +1,3 @@
[child-src-cross-origin-load.sub.html]
[Two of the three iframe are expected to load.]
expected: FAIL

View file

@ -0,0 +1,3 @@
[child-src-redirect-blocked.sub.html]
[Expecting logs: ["PASS IFrame #1 generated a load event.", "violated-directive=frame-src"\]]
expected: FAIL

View file

@ -0,0 +1,7 @@
[child-src-worker-blocked.sub.html]
expected: ERROR
[Should throw a securitypolicyviolation event]
expected: TIMEOUT
[Should block worker because it does not match any directive including the deprecated 'child-src']
expected: TIMEOUT