<!DOCTYPE html>
<html>
<head>
<style>
#test {
    background-color: red;
    height: 128px;
    width: 128px;
}
</style>
<meta http-equiv="Content-Security-Policy" content="style-src *">
<script>
if (window.internals && window.internals.settings)
    internals.settings.setAllowContentSecurityPolicySourceStarToMatchAnyProtocol(true);

function createLinkElementWithStylesheet(stylesheetURL)
{
    var link = document.createElement("link");
    link.rel = "stylesheet";
    link.href = stylesheetURL;
    return link;
}

var blobURL = window.URL.createObjectURL(new Blob(["#test { background-color: green !important; }"], {type: "text/css"}));
document.head.appendChild(createLinkElementWithStylesheet(blobURL));
</script>
</head>
<body>
<p>This tests that loading a stylesheet with a blob URL is allowed when the page has Content Security Policy &quot;style-src *&quot; and the WebKit setting AllowContentSecurityPolicySourceStarToMatchAnyProtocol is enabled. This test PASSED if you see a green square below. Otherwise, it FAILED.</p>
<div id="test"></div>
</body>
</html>