servo/tests/wpt/meta/content-security-policy/navigation/to-javascript-parent-initiated-child-csp.html.ini
Tim van der Lippe dd63325f50
Check CSP for javascript: URLs (#36709)
Also update a WPT test to fail-fast if the iframe incorrectly
evaluates the `eval`. Before, it would run into a timeout if
the implementation is correct. Now we reject the promise
when an exception is thrown.

Requires servo/rust-content-security-policy#6

Signed-off-by: Tim van der Lippe <tvanderlippe@gmail.com>
2025-05-02 20:13:31 +00:00

16 lines
847 B
INI
Vendored

[to-javascript-parent-initiated-child-csp.html]
expected: TIMEOUT
[Should not have executed the javascript URL for\n iframe.src with child's CSP "script-src 'none'"]
expected: TIMEOUT
[Should not have executed the javascript URL for\n otherTabWithScriptSrcNone.location.href with child's CSP "script-src 'none'"]
expected: NOTRUN
[Should not have executed the javascript URL for\n a[target=iframeWithScriptSrcNone\].href with child's CSP "script-src 'none'"]
expected: NOTRUN
[Should not have executed the javascript URL for\n area[target=iframeWithScriptSrcNone\].href with child's CSP "script-src 'none'"]
expected: NOTRUN
[Should not have executed the javascript URL for\n area[target=otherTabWithScriptSrcNone\].href with child's CSP "script-src 'none'"]
expected: NOTRUN