servo/tests/wpt/web-platform-tests/fetch/nosniff/stylesheet.html
Fabrice Desré 990b85049e Ignore mime type parameters in nosniff
This patch implements the following changes:
- Only check for the toplevel/sublevel part of the mime type when
  deciding if it's a js or css resource, ignoring the mime parameters.
- Fix the wpt tests that did not escape url parameters properly and
  also used an invalid syntax for the mime parameter.
- Update the wpt manifest.
2017-05-15 14:43:45 +02:00

38 lines
1.2 KiB
HTML

<!-- quirks mode is important, text/css is already required otherwise -->
<script src=/resources/testharness.js></script>
<script src=/resources/testharnessreport.js></script>
<div id=log></div>
<script>
var fails = [null, "", "x", "x/x"],
passes = ["text/css", "text/css;charset=utf-8", "text/css;blah"]
const get_url = (mime) => {
let url = "resources/css.py"
if (mime != null) {
url += "?type=" + encodeURIComponent(mime)
}
return url
}
fails.forEach(function(mime) {
async_test(function(t) {
var link = document.createElement("link")
link.rel = "stylesheet"
link.onerror = t.step_func_done(function(){})
link.onload = t.unreached_func("Unexpected load event")
link.href = get_url(mime)
document.body.appendChild(link)
}, "URL query: " + mime)
})
passes.forEach(function(mime) {
async_test(function(t) {
var link = document.createElement("link")
link.rel = "stylesheet"
link.onerror = t.unreached_func("Unexpected error event")
link.onload = t.step_func_done(function(){})
link.href = get_url(mime)
document.body.appendChild(link)
}, "URL query: " + mime)
})
</script>