Google Git
Sign in
webkit / WebKit / 0f9dda3eb5e8bee1224032800f3b156cd5ce812d / . / LayoutTests / http / tests / security / contentSecurityPolicy
tree: 7f44f256c404b136d84f81cbec6d3bf0f7fa80bb [path history] [tgz]
  1. 1.1/
  2. block-all-mixed-content/
  3. extensions/
  4. manifest.test/
  5. resources/
  6. upgrade-insecure-requests/
  7. userAgentShadowDOM/
  8. allow-favicon-expected.txt
  9. allow-favicon.html
  10. allow-wasm-after-window-open-expected.txt
  11. allow-wasm-after-window-open.html
  12. audio-redirect-allowed-expected.txt
  13. audio-redirect-allowed.html
  14. audio-redirect-allowed2-expected.txt
  15. audio-redirect-allowed2.html
  16. audio-redirect-blocked-expected.txt
  17. audio-redirect-blocked.html
  18. audioworklet-script-src-allowed-expected.txt
  19. audioworklet-script-src-allowed.html
  20. audioworklet-script-src-blocked-expected.txt
  21. audioworklet-script-src-blocked.html
  22. blob-url-does-not-match-source-self-expected.html
  23. blob-url-does-not-match-source-self.html
  24. blob-url-matches-source-blob-expected.txt
  25. blob-url-matches-source-blob.html
  26. block-eval-onload-in-nested-about-blank-iframe-expected.txt
  27. block-eval-onload-in-nested-about-blank-iframe.html
  28. block-favicon-expected.txt
  29. block-favicon.html
  30. block-mixed-content-hides-warning-expected.txt
  31. block-mixed-content-hides-warning.html
  32. cached-frame-csp-expected.txt
  33. cached-frame-csp.html
  34. combine-multiple-policies-expected.txt
  35. combine-multiple-policies.html
  36. connect-src-beacon-allowed-expected.txt
  37. connect-src-beacon-allowed.html
  38. connect-src-beacon-blocked-expected.txt
  39. connect-src-beacon-blocked.html
  40. connect-src-eventsource-allowed-expected.txt
  41. connect-src-eventsource-allowed.html
  42. connect-src-eventsource-blocked-expected.txt
  43. connect-src-eventsource-blocked.html
  44. connect-src-eventsource-redirect-to-blocked-expected.txt
  45. connect-src-eventsource-redirect-to-blocked.html
  46. connect-src-star-secure-websocket-allowed-expected.txt
  47. connect-src-star-secure-websocket-allowed.html
  48. connect-src-star-websocket-allowed-expected.txt
  49. connect-src-star-websocket-allowed.html
  50. connect-src-websocket-allowed-expected.txt
  51. connect-src-websocket-allowed.html
  52. connect-src-websocket-blocked-expected.txt
  53. connect-src-websocket-blocked.html
  54. connect-src-xmlhttprequest-allowed-expected.txt
  55. connect-src-xmlhttprequest-allowed.html
  56. connect-src-xmlhttprequest-blocked-expected.txt
  57. connect-src-xmlhttprequest-blocked.html
  58. connect-src-xmlhttprequest-redirect-to-blocked-expected.txt
  59. connect-src-xmlhttprequest-redirect-to-blocked.html
  60. cross-origin-plugin-document-allowed-in-child-window-expected.txt
  61. cross-origin-plugin-document-allowed-in-child-window.html
  62. csp-header-is-sent-expected.txt
  63. csp-header-is-sent.html
  64. default-src-inline-allowed-expected.txt
  65. default-src-inline-allowed.html
  66. default-src-inline-blocked-expected.txt
  67. default-src-inline-blocked.html
  68. default-src-star-secure-websocket-allowed-expected.txt
  69. default-src-star-secure-websocket-allowed.html
  70. default-src-star-websocket-allowed-expected.txt
  71. default-src-star-websocket-allowed.html
  72. directive-parsing-01-expected.txt
  73. directive-parsing-01.html
  74. directive-parsing-02-expected.txt
  75. directive-parsing-02.html
  76. directive-parsing-03-expected.txt
  77. directive-parsing-03.html
  78. directive-parsing-04-expected.txt
  79. directive-parsing-04.html
  80. directive-parsing-05-expected.txt
  81. directive-parsing-05.html
  82. directive-parsing-multiple-headers-expected.txt
  83. directive-parsing-multiple-headers.html
  84. duplicate-directive-expected.txt
  85. duplicate-directive.html
  86. embed-redirect-allowed-expected.txt
  87. embed-redirect-allowed.html
  88. embed-redirect-allowed2-expected.txt
  89. embed-redirect-allowed2.html
  90. embed-redirect-blocked-expected.txt
  91. embed-redirect-blocked.html
  92. embed-redirect-blocked2-expected.txt
  93. embed-redirect-blocked2.html
  94. embed-redirect-blocked3-expected.txt
  95. embed-redirect-blocked3.html
  96. embed-src-url-blocked-expected.txt
  97. embed-src-url-blocked.html
  98. embed-src-url-blocked2-expected.txt
  99. embed-src-url-blocked2.html
  100. embed-with-no-url-allowed-by-default-src-star-expected.txt
  101. embed-with-no-url-allowed-by-default-src-star.html
  102. embed-with-no-url-allowed-by-star-expected.txt
  103. embed-with-no-url-allowed-by-star.html
  104. eval-allowed-expected.txt
  105. eval-allowed-in-report-only-mode-and-sends-report-expected.txt
  106. eval-allowed-in-report-only-mode-and-sends-report.py
  107. eval-allowed-in-report-only-mode-expected.txt
  108. eval-allowed-in-report-only-mode.py
  109. eval-allowed.html
  110. eval-blocked-and-sends-report-expected.txt
  111. eval-blocked-and-sends-report.html
  112. eval-blocked-expected.txt
  113. eval-blocked-in-about-blank-iframe-expected.txt
  114. eval-blocked-in-about-blank-iframe.html
  115. eval-blocked-in-external-script-expected.txt
  116. eval-blocked-in-external-script.html
  117. eval-blocked-in-subframe-expected.txt
  118. eval-blocked-in-subframe.html
  119. eval-blocked.html
  120. eval-scripts-setInterval-allowed-expected.txt
  121. eval-scripts-setInterval-allowed.html
  122. eval-scripts-setInterval-blocked-expected.txt
  123. eval-scripts-setInterval-blocked.html
  124. eval-scripts-setTimeout-allowed-expected.txt
  125. eval-scripts-setTimeout-allowed.html
  126. eval-scripts-setTimeout-blocked-expected.txt
  127. eval-scripts-setTimeout-blocked.html
  128. font-redirect-allowed-expected.txt
  129. font-redirect-allowed.html
  130. font-redirect-allowed2-expected.txt
  131. font-redirect-allowed2.html
  132. font-redirect-blocked-expected.txt
  133. font-redirect-blocked.html
  134. form-action-redirect-with-correct-blocked-uri-expected.txt
  135. form-action-redirect-with-correct-blocked-uri.html
  136. form-action-src-redirect-allowed-expected.txt
  137. form-action-src-redirect-allowed.html
  138. form-action-src-redirect-allowed2-expected.txt
  139. form-action-src-redirect-allowed2.html
  140. frame-src-about-blank-allowed-by-default-expected.txt
  141. frame-src-about-blank-allowed-by-default.html
  142. frame-src-about-blank-allowed-by-scheme-expected.txt
  143. frame-src-about-blank-allowed-by-scheme.html
  144. frame-src-allowed-expected.txt
  145. frame-src-allowed.html
  146. frame-src-blocked-expected.txt
  147. frame-src-blocked.html
  148. frame-src-cross-origin-load-expected.txt
  149. frame-src-cross-origin-load.html
  150. frame-src-redirect-blocked-expected.txt
  151. frame-src-redirect-blocked.html
  152. function-constructor-allowed-expected.txt
  153. function-constructor-allowed.html
  154. function-constructor-blocked-expected.txt
  155. function-constructor-blocked.html
  156. iframe-allowed-when-loaded-via-javascript-url-expected.txt
  157. iframe-allowed-when-loaded-via-javascript-url.html
  158. iframe-blank-url-programmatically-add-external-script-expected.txt
  159. iframe-blank-url-programmatically-add-external-script.html
  160. iframe-blocked-when-loaded-via-javascript-url-expected.txt
  161. iframe-blocked-when-loaded-via-javascript-url.html
  162. iframe-blocked-when-loaded-via-javascript-url2-expected.txt
  163. iframe-blocked-when-loaded-via-javascript-url2.html
  164. iframe-inside-csp-expected.txt
  165. iframe-inside-csp.html
  166. iframe-redirect-allowed-by-child-src-expected.txt
  167. iframe-redirect-allowed-by-child-src.html
  168. iframe-redirect-allowed-by-child-src2-expected.txt
  169. iframe-redirect-allowed-by-child-src2.html
  170. iframe-redirect-allowed-by-frame-src-expected.txt
  171. iframe-redirect-allowed-by-frame-src.html
  172. iframe-redirect-allowed-by-frame-src2-expected.txt
  173. iframe-redirect-allowed-by-frame-src2.html
  174. iframe-redirect-blocked-by-child-src-expected.txt
  175. iframe-redirect-blocked-by-child-src.html
  176. iframe-redirect-blocked-by-frame-src-expected.txt
  177. iframe-redirect-blocked-by-frame-src.html
  178. iframe-srcdoc-external-script-expected.txt
  179. iframe-srcdoc-external-script.html
  180. image-allowed-expected.txt
  181. image-allowed.html
  182. image-blocked-alt-text-expected.html
  183. image-blocked-alt-text.html
  184. image-blocked-expected.txt
  185. image-blocked-in-about-blank-window-expected.txt
  186. image-blocked-in-about-blank-window.html
  187. image-blocked.html
  188. image-data-URL-blocked-alt-text-expected.html
  189. image-data-URL-blocked-alt-text.html
  190. image-document-default-src-none-expected.txt
  191. image-document-default-src-none.html
  192. image-full-host-wildcard-blocked-expected.txt
  193. image-full-host-wildcard-blocked.html
  194. image-host-wildcard-allowed-expected.txt
  195. image-host-wildcard-allowed.html
  196. image-redirect-allowed-expected.txt
  197. image-redirect-allowed.html
  198. image-redirect-allowed2-expected.txt
  199. image-redirect-allowed2.html
  200. image-redirect-blocked-expected.txt
  201. image-redirect-blocked.html
  202. image-with-http-url-allowed-by-csp-img-src-star-expected.txt
  203. image-with-http-url-allowed-by-csp-img-src-star.html
  204. image-with-https-url-allowed-by-csp-img-src-star-expected.txt
  205. image-with-https-url-allowed-by-csp-img-src-star.html
  206. img-blocked-no-gc-crash-expected.txt
  207. img-blocked-no-gc-crash.html
  208. injected-inline-script-allowed-expected.txt
  209. injected-inline-script-allowed.html
  210. injected-inline-script-blocked-expected.txt
  211. injected-inline-script-blocked.html
  212. injected-inline-style-allowed-expected.txt
  213. injected-inline-style-allowed.html
  214. injected-inline-style-blocked-expected.txt
  215. injected-inline-style-blocked.html
  216. inline-event-handler-allowed-after-being-replaced-expected.txt
  217. inline-event-handler-allowed-after-being-replaced.html
  218. inline-event-handler-blocked-after-injecting-meta-expected.txt
  219. inline-event-handler-blocked-after-injecting-meta.html
  220. inline-script-allowed-expected.txt
  221. inline-script-allowed.html
  222. inline-script-blocked-expected.txt
  223. inline-script-blocked-goofy-expected.txt
  224. inline-script-blocked-goofy.html
  225. inline-script-blocked-javascript-url-expected.txt
  226. inline-script-blocked-javascript-url.html
  227. inline-script-blocked.html
  228. inline-style-allowed-expected.txt
  229. inline-style-allowed-while-cloning-objects-expected.txt
  230. inline-style-allowed-while-cloning-objects.html
  231. inline-style-allowed.html
  232. inline-style-attribute-allowed-expected.txt
  233. inline-style-attribute-allowed.html
  234. inline-style-attribute-blocked-expected.txt
  235. inline-style-attribute-blocked.html
  236. inline-style-attribute-on-html-expected.txt
  237. inline-style-attribute-on-html.html
  238. inline-style-blocked-expected.txt
  239. inline-style-blocked.html
  240. javascript-url-allowed-expected.txt
  241. javascript-url-allowed.html
  242. javascript-url-blocked-by-default-src-star-expected.txt
  243. javascript-url-blocked-by-default-src-star.html
  244. javascript-url-blocked-expected.txt
  245. javascript-url-blocked.html
  246. link-with-http-url-allowed-by-csp-style-src-star-expected.txt
  247. link-with-http-url-allowed-by-csp-style-src-star.html
  248. link-with-https-url-allowed-by-csp-style-src-star-expected.txt
  249. link-with-https-url-allowed-by-csp-style-src-star.html
  250. manifest-src-allowed-expected.txt
  251. manifest-src-allowed.html
  252. manifest-src-blocked-expected.txt
  253. manifest-src-blocked.html
  254. media-src-allowed-expected.txt
  255. media-src-allowed.html
  256. media-src-blocked-expected.txt
  257. media-src-blocked.html
  258. media-src-track-block-expected.txt
  259. media-src-track-block.html
  260. meta-tag-ignored-if-not-in-head-expected.txt
  261. meta-tag-ignored-if-not-in-head.html
  262. meta-tag-ignored-if-not-in-head2-expected.txt
  263. meta-tag-ignored-if-not-in-head2.html
  264. module-eval-blocked-expected.txt
  265. module-eval-blocked-in-external-script-expected.txt
  266. module-eval-blocked-in-external-script.html
  267. module-eval-blocked.html
  268. navigate-self-to-blob-expected.txt
  269. navigate-self-to-blob.html
  270. navigate-self-to-data-url-expected.txt
  271. navigate-self-to-data-url.html
  272. no-policy-expected.txt
  273. no-policy.html
  274. object-in-svg-foreignobject-expected.txt
  275. object-in-svg-foreignobject.html
  276. object-redirect-allowed-expected.txt
  277. object-redirect-allowed.html
  278. object-redirect-allowed2-expected.txt
  279. object-redirect-allowed2.html
  280. object-redirect-blocked-expected.txt
  281. object-redirect-blocked.html
  282. object-redirect-blocked2-expected.txt
  283. object-redirect-blocked2.html
  284. object-redirect-blocked3-expected.txt
  285. object-redirect-blocked3.html
  286. object-src-allows-embed-blocked-by-child-src-expected.txt
  287. object-src-allows-embed-blocked-by-child-src.html
  288. object-src-allows-embed-blocked-by-frame-src-expected.txt
  289. object-src-allows-embed-blocked-by-frame-src.html
  290. object-src-allows-object-blocked-by-child-src-expected.txt
  291. object-src-allows-object-blocked-by-child-src.html
  292. object-src-allows-object-blocked-by-frame-src-expected.txt
  293. object-src-allows-object-blocked-by-frame-src.html
  294. object-src-applet-archive-codebase-expected.txt
  295. object-src-applet-archive-codebase.html
  296. object-src-applet-archive-expected.txt
  297. object-src-applet-archive.html
  298. object-src-applet-code-codebase-expected.txt
  299. object-src-applet-code-codebase.html
  300. object-src-applet-code-expected.txt
  301. object-src-applet-code.html
  302. object-src-blocks-embed-allowed-by-child-src-expected.txt
  303. object-src-blocks-embed-allowed-by-child-src.html
  304. object-src-blocks-embed-allowed-by-frame-src-expected.txt
  305. object-src-blocks-embed-allowed-by-frame-src.html
  306. object-src-blocks-object-allowed-by-child-src-expected.txt
  307. object-src-blocks-object-allowed-by-child-src.html
  308. object-src-blocks-object-allowed-by-frame-src-expected.txt
  309. object-src-blocks-object-allowed-by-frame-src.html
  310. object-src-does-not-affect-child-expected.txt
  311. object-src-does-not-affect-child.html
  312. object-src-no-url-allowed-expected.txt
  313. object-src-no-url-allowed.html
  314. object-src-no-url-blocked-expected.txt
  315. object-src-no-url-blocked.html
  316. object-src-none-allowed-expected.txt
  317. object-src-none-allowed.html
  318. object-src-none-blocked-expected.txt
  319. object-src-none-blocked.html
  320. object-src-param-code-blocked-expected.txt
  321. object-src-param-code-blocked.html
  322. object-src-param-movie-blocked-expected.txt
  323. object-src-param-movie-blocked.html
  324. object-src-param-src-blocked-expected.txt
  325. object-src-param-src-blocked.html
  326. object-src-param-src-blocked2-expected.txt
  327. object-src-param-src-blocked2.html
  328. object-src-param-url-blocked-expected.txt
  329. object-src-param-url-blocked.html
  330. object-src-url-allowed-expected.txt
  331. object-src-url-allowed.html
  332. object-src-url-blocked-expected.txt
  333. object-src-url-blocked.html
  334. object-src-url-blocked2-expected.txt
  335. object-src-url-blocked2.html
  336. object-with-no-url-allowed-by-default-src-star-expected.txt
  337. object-with-no-url-allowed-by-default-src-star.html
  338. object-with-no-url-allowed-by-star-expected.txt
  339. object-with-no-url-allowed-by-star.html
  340. plugin-blocked-in-about-blank-window-expected.txt
  341. plugin-blocked-in-about-blank-window.html
  342. plugin-in-iframe-with-csp-expected.txt
  343. plugin-in-iframe-with-csp.html
  344. policy-does-not-affect-child-expected.txt
  345. policy-does-not-affect-child.html
  346. redirect-does-not-match-paths-expected.txt
  347. redirect-does-not-match-paths.html
  348. register-bypassing-scheme-expected.txt
  349. register-bypassing-scheme-partial-expected.txt
  350. register-bypassing-scheme-partial.html
  351. register-bypassing-scheme.html
  352. report-and-enforce-expected.txt
  353. report-and-enforce.py
  354. report-blocked-data-uri-expected.txt
  355. report-blocked-data-uri.py
  356. report-blocked-file-uri-expected.txt
  357. report-blocked-file-uri.py
  358. report-blocked-uri-after-blocked-redirect-expected.txt
  359. report-blocked-uri-after-blocked-redirect.html
  360. report-blocked-uri-after-multiple-redirects-expected.txt
  361. report-blocked-uri-after-multiple-redirects.html
  362. report-blocked-uri-and-do-not-follow-redirect-when-sending-report-expected.txt
  363. report-blocked-uri-and-do-not-follow-redirect-when-sending-report.py
  364. report-blocked-uri-cross-origin-expected.txt
  365. report-blocked-uri-cross-origin.py
  366. report-blocked-uri-expected.txt
  367. report-blocked-uri.py
  368. report-cross-origin-no-cookies-expected.txt
  369. report-cross-origin-no-cookies-when-private-browsing-enabled-expected.txt
  370. report-cross-origin-no-cookies-when-private-browsing-enabled.py
  371. report-cross-origin-no-cookies-when-private-browsing-toggled-expected.txt
  372. report-cross-origin-no-cookies-when-private-browsing-toggled.py
  373. report-cross-origin-no-cookies.py
  374. report-document-uri-after-blocked-redirect-expected.txt
  375. report-document-uri-after-blocked-redirect.html
  376. report-document-uri-blob-expected.txt
  377. report-document-uri-blob.html
  378. report-multiple-violations-01-expected.txt
  379. report-multiple-violations-01.py
  380. report-multiple-violations-02-expected.txt
  381. report-multiple-violations-02.py
  382. report-only-connect-src-beacon-redirect-blocked-expected.txt
  383. report-only-connect-src-beacon-redirect-blocked.py
  384. report-only-connect-src-xmlhttprequest-redirect-to-blocked-expected.txt
  385. report-only-connect-src-xmlhttprequest-redirect-to-blocked.py
  386. report-only-expected.txt
  387. report-only-from-header-expected.txt
  388. report-only-from-header.py
  389. report-only-meta-tag-ignored-if-not-in-head-expected.txt
  390. report-only-meta-tag-ignored-if-not-in-head.html
  391. report-only-meta-tag-ignored-if-not-in-head2-expected.txt
  392. report-only-meta-tag-ignored-if-not-in-head2.html
  393. report-only-report-uri-missing-expected.txt
  394. report-only-report-uri-missing.py
  395. report-only-upgrade-insecure-expected.txt
  396. report-only-upgrade-insecure.py
  397. report-only.py
  398. report-same-origin-no-cookies-when-private-browsing-toggled-expected.txt
  399. report-same-origin-no-cookies-when-private-browsing-toggled.py
  400. report-same-origin-with-cookies-expected.txt
  401. report-same-origin-with-cookies-when-private-browsing-enabled-expected.txt
  402. report-same-origin-with-cookies-when-private-browsing-enabled.py
  403. report-same-origin-with-cookies.py
  404. report-status-code-zero-when-using-https-expected.txt
  405. report-status-code-zero-when-using-https.html
  406. report-uri-expected.txt
  407. report-uri-from-child-frame-expected.txt
  408. report-uri-from-child-frame.html
  409. report-uri-from-inline-javascript-expected.txt
  410. report-uri-from-inline-javascript.py
  411. report-uri-from-javascript-expected.txt
  412. report-uri-from-javascript.py
  413. report-uri-in-meta-tag-ignored-expected.txt
  414. report-uri-in-meta-tag-ignored.html
  415. report-uri-scheme-relative-expected.txt
  416. report-uri-scheme-relative.py
  417. report-uri.py
  418. report-violation-to-document-after-element-has-been-detached-expected.txt
  419. report-violation-to-document-after-element-has-been-detached.html
  420. same-origin-plugin-document-allowed-in-child-window-expected.txt
  421. same-origin-plugin-document-allowed-in-child-window.html
  422. same-origin-plugin-document-blocked-in-child-window-expected.txt
  423. same-origin-plugin-document-blocked-in-child-window-report-expected.txt
  424. same-origin-plugin-document-blocked-in-child-window-report.py
  425. same-origin-plugin-document-blocked-in-child-window.html
  426. same-origin-plugin-document-with-csp-blocked-in-child-window-expected.txt
  427. same-origin-plugin-document-with-csp-blocked-in-child-window.html
  428. sandbox-allow-scripts-in-http-header-control-expected.txt
  429. sandbox-allow-scripts-in-http-header-control.html
  430. sandbox-allow-scripts-in-http-header-expected.txt
  431. sandbox-allow-scripts-in-http-header.html
  432. sandbox-allow-scripts-in-http-header2-expected.txt
  433. sandbox-allow-scripts-in-http-header2.py
  434. sandbox-empty-in-http-header-expected.txt
  435. sandbox-empty-in-http-header-inherited-by-subframe-expected.txt
  436. sandbox-empty-in-http-header-inherited-by-subframe.py
  437. sandbox-empty-in-http-header.py
  438. sandbox-in-http-header-control-expected.txt
  439. sandbox-in-http-header-control.html
  440. sandbox-in-http-header-expected.txt
  441. sandbox-in-http-header.html
  442. sandbox-in-meta-tag-ignored-expected.txt
  443. sandbox-in-meta-tag-ignored.html
  444. sandbox-invalid-header-expected.txt
  445. sandbox-invalid-header.html
  446. sandbox-report-only-expected.txt
  447. sandbox-report-only.html
  448. script-loads-with-img-src-expected.txt
  449. script-loads-with-img-src.html
  450. script-redirect-allowed-expected.txt
  451. script-redirect-allowed.html
  452. script-redirect-allowed2-expected.txt
  453. script-redirect-allowed2.html
  454. script-redirect-blocked-expected.txt
  455. script-redirect-blocked.html
  456. script-src-appended-script-expected.txt
  457. script-src-appended-script.html
  458. script-src-blocked-error-event-expected.txt
  459. script-src-blocked-error-event.html
  460. script-src-in-iframe-expected.txt
  461. script-src-in-iframe.html
  462. script-src-none-expected.txt
  463. script-src-none-inline-event-expected.txt
  464. script-src-none-inline-event.html
  465. script-src-none.html
  466. script-src-overrides-default-src-expected.txt
  467. script-src-overrides-default-src.html
  468. script-src-parsing-implicit-and-explicit-port-number-expected.txt
  469. script-src-parsing-implicit-and-explicit-port-number.html
  470. script-src-redirect-expected.txt
  471. script-src-redirect.html
  472. script-src-self-blocked-01-expected.txt
  473. script-src-self-blocked-01.html
  474. script-src-self-blocked-02-expected.txt
  475. script-src-self-blocked-02.html
  476. script-src-self-blocked-03-expected.txt
  477. script-src-self-blocked-03.html
  478. script-src-self-expected.txt
  479. script-src-self.html
  480. script-src-star-cross-scheme-expected.txt
  481. script-src-star-cross-scheme.html
  482. script-src-strict-dynamic-and-script-src-elem-expected.txt
  483. script-src-strict-dynamic-and-script-src-elem.html
  484. script-src-strict-dynamic-and-unsafe-inline-policies-expected.txt
  485. script-src-strict-dynamic-and-unsafe-inline-policies.html
  486. script-src-strict-dynamic-inline-report-expected.txt
  487. script-src-strict-dynamic-inline-report.py
  488. source-list-parsing-01-expected.txt
  489. source-list-parsing-01.html
  490. source-list-parsing-02-expected.txt
  491. source-list-parsing-02.html
  492. source-list-parsing-03-expected.txt
  493. source-list-parsing-03.html
  494. source-list-parsing-04-expected.txt
  495. source-list-parsing-04.html
  496. source-list-parsing-05-expected.txt
  497. source-list-parsing-05.html
  498. source-list-parsing-06-expected.txt
  499. source-list-parsing-06.html
  500. source-list-parsing-07-expected.txt
  501. source-list-parsing-07.html
  502. source-list-parsing-08-expected.txt
  503. source-list-parsing-08.html
  504. source-list-parsing-09-expected.txt
  505. source-list-parsing-09.html
  506. source-list-parsing-10-expected.txt
  507. source-list-parsing-10.html
  508. source-list-parsing-deprecated-expected.txt
  509. source-list-parsing-deprecated.html
  510. source-list-parsing-malformed-meta-expected.txt
  511. source-list-parsing-malformed-meta.html
  512. source-list-parsing-no-semicolon-expected.txt
  513. source-list-parsing-no-semicolon.html
  514. source-list-parsing-nonascii-expected.txt
  515. source-list-parsing-nonascii.html
  516. source-list-parsing-none-expected.txt
  517. source-list-parsing-none.html
  518. source-list-parsing-paths-01-expected.txt
  519. source-list-parsing-paths-01.html
  520. source-list-parsing-paths-02-expected.txt
  521. source-list-parsing-paths-02.html
  522. source-list-parsing-paths-03-expected.txt
  523. source-list-parsing-paths-03.html
  524. srcdoc-doesnt-bypass-script-src-expected.txt
  525. srcdoc-doesnt-bypass-script-src.html
  526. strict-dynamic-mixed-order-host-list-expected.txt
  527. strict-dynamic-mixed-order-host-list.html
  528. strict-dynamic-mixed-order-scheme-list-expected.txt
  529. strict-dynamic-mixed-order-scheme-list.html
  530. strict-dynamic-mixed-order-self-expected.txt
  531. strict-dynamic-mixed-order-self.html
  532. strict-dynamic-mixed-order-unsafe-inline-expected.txt
  533. strict-dynamic-mixed-order-unsafe-inline.html
  534. strict-dynamic-module-script-expected.txt
  535. strict-dynamic-module-script.html
  536. style-allowed-expected.txt
  537. style-allowed.html
  538. style-blocked-expected.txt
  539. style-blocked.html
  540. style-src-blocked-error-event-expected.txt
  541. style-src-blocked-error-event.html
  542. stylesheet-allowed-with-nonce-expected.txt
  543. stylesheet-allowed-with-nonce.py
  544. stylesheet-redirect-allowed-expected.txt
  545. stylesheet-redirect-allowed.html
  546. stylesheet-redirect-allowed2-expected.txt
  547. stylesheet-redirect-allowed2.html
  548. stylesheet-redirect-blocked-expected.txt
  549. stylesheet-redirect-blocked.html
  550. subframe-with-data-url-inheritance-expected.txt
  551. subframe-with-data-url-inheritance.html
  552. svg-font-redirect-allowed-expected.txt
  553. svg-font-redirect-allowed.html
  554. svg-font-redirect-allowed2-expected.txt
  555. svg-font-redirect-allowed2.html
  556. svg-font-redirect-blocked-expected.txt
  557. svg-font-redirect-blocked.html
  558. svg-image-redirect-allowed-expected.txt
  559. svg-image-redirect-allowed.html
  560. svg-image-redirect-allowed2-expected.txt
  561. svg-image-redirect-allowed2.html
  562. svg-image-redirect-blocked-expected.txt
  563. svg-image-redirect-blocked.html
  564. track-redirect-allowed-expected.txt
  565. track-redirect-allowed.html
  566. track-redirect-allowed2-expected.txt
  567. track-redirect-allowed2.html
  568. track-redirect-blocked-expected.txt
  569. track-redirect-blocked.html
  570. user-style-sheet-font-crasher-expected.txt
  571. user-style-sheet-font-crasher.py
  572. video-redirect-allowed-expected.txt
  573. video-redirect-allowed.html
  574. video-redirect-allowed2-expected.txt
  575. video-redirect-allowed2.html
  576. video-redirect-blocked-expected.txt
  577. video-redirect-blocked.html
  578. video-with-http-url-allowed-by-csp-media-src-star-expected.txt
  579. video-with-http-url-allowed-by-csp-media-src-star.html
  580. video-with-https-url-allowed-by-csp-media-src-star-expected.txt
  581. video-with-https-url-allowed-by-csp-media-src-star.html
  582. WebAssembly-allowed-expected.txt
  583. WebAssembly-allowed.html
  584. WebAssembly-blocked-expected.txt
  585. WebAssembly-blocked-in-about-blank-iframe-expected.txt
  586. WebAssembly-blocked-in-about-blank-iframe.html
  587. WebAssembly-blocked-in-external-script-expected.txt
  588. WebAssembly-blocked-in-external-script.html
  589. WebAssembly-blocked-in-subframe-expected.txt
  590. WebAssembly-blocked-in-subframe.html
  591. WebAssembly-blocked.html
  592. window-open-javascript-url-blocked-expected.txt
  593. window-open-javascript-url-blocked.html
  594. window-open-javascript-url-with-target-blocked-expected.txt
  595. window-open-javascript-url-with-target-blocked.html
  596. worker-blob-inherits-csp-blocks-eval-expected.txt
  597. worker-blob-inherits-csp-blocks-eval.html
  598. worker-blob-inherits-csp-expected.txt
  599. worker-blob-inherits-csp-importScripts-block-aborts-all-subsequent-imports-expected.txt
  600. worker-blob-inherits-csp-importScripts-block-aborts-all-subsequent-imports.html
  601. worker-blob-inherits-csp-importScripts-redirect-cross-origin-blocked-expected.txt
  602. worker-blob-inherits-csp-importScripts-redirect-cross-origin-blocked.html
  603. worker-blob-inherits-csp.html
  604. worker-blob-location-expected.txt
  605. worker-blob-location.html
  606. worker-connect-src-allowed-expected.txt
  607. worker-connect-src-allowed.html
  608. worker-connect-src-blocked-expected.txt
  609. worker-connect-src-blocked.html
  610. worker-csp-blocks-xhr-redirect-cross-origin-expected.txt
  611. worker-csp-blocks-xhr-redirect-cross-origin.html
  612. worker-csp-importScripts-redirect-cross-origin-allowed-expected.txt
  613. worker-csp-importScripts-redirect-cross-origin-allowed.html
  614. worker-csp-importScripts-redirect-cross-origin-blocked-expected.txt
  615. worker-csp-importScripts-redirect-cross-origin-blocked.html
  616. worker-eval-blocked-expected.txt
  617. worker-eval-blocked.html
  618. worker-function-function-blocked-expected.txt
  619. worker-function-function-blocked.html
  620. worker-importscripts-blocked-expected.txt
  621. worker-importscripts-blocked.html
  622. worker-multiple-csp-headers-expected.txt
  623. worker-multiple-csp-headers.html
  624. worker-redirect-allowed-expected.txt
  625. worker-redirect-allowed.html
  626. worker-script-src-expected.txt
  627. worker-script-src.html
  628. worker-set-timeout-blocked-expected.txt
  629. worker-set-timeout-blocked.html
  630. worker-without-csp-importScripts-redirect-cross-origin-allowed-expected.txt
  631. worker-without-csp-importScripts-redirect-cross-origin-allowed.html
  632. worker-without-own-csp-expected.txt
  633. worker-without-own-csp.html
  634. xmlhttprequest-protected-resource-does-not-crash-expected.txt
  635. xmlhttprequest-protected-resource-does-not-crash.html
  636. xsl-allowed-expected.txt
  637. xsl-allowed.py
  638. xsl-blocked-expected.txt
  639. xsl-blocked.py
  640. xsl-img-blocked-expected.txt
  641. xsl-img-blocked.py
  642. xsl-redirect-allowed-expected.txt
  643. xsl-redirect-allowed.html
  644. xsl-redirect-allowed2-expected.txt
  645. xsl-redirect-allowed2.html
  646. xsl-redirect-blocked-expected.txt
  647. xsl-redirect-blocked.html
  648. xsl-unaffected-by-style-src-1-expected.png
  649. xsl-unaffected-by-style-src-1-expected.txt
  650. xsl-unaffected-by-style-src-1.py
  651. xsl-unaffected-by-style-src-2-expected.txt
  652. xsl-unaffected-by-style-src-2.py