Google Git
Sign in
webkit / WebKit / 1af45fc1915c308be35b19553899267f3a4f02ea / . / LayoutTests / http / tests / security / contentSecurityPolicy
tree: 710b18ac78a925b65443302a17605fde731ba128 [path history] [tgz]
  1. 1.1/
  2. block-all-mixed-content/
  3. manifest.test/
  4. resources/
  5. upgrade-insecure-requests/
  6. userAgentShadowDOM/
  7. allow-favicon-expected.txt
  8. allow-favicon.html
  9. audio-redirect-allowed-expected.txt
  10. audio-redirect-allowed.html
  11. audio-redirect-allowed2-expected.txt
  12. audio-redirect-allowed2.html
  13. audio-redirect-blocked-expected.txt
  14. audio-redirect-blocked.html
  15. audioworklet-script-src-allowed-expected.txt
  16. audioworklet-script-src-allowed.html
  17. audioworklet-script-src-blocked-expected.txt
  18. audioworklet-script-src-blocked.html
  19. blob-url-does-not-match-source-self-expected.html
  20. blob-url-does-not-match-source-self.html
  21. blob-url-matches-source-blob-expected.txt
  22. blob-url-matches-source-blob.html
  23. block-favicon-expected.txt
  24. block-favicon.html
  25. block-mixed-content-hides-warning-expected.txt
  26. block-mixed-content-hides-warning.html
  27. cached-frame-csp-expected.txt
  28. cached-frame-csp.html
  29. combine-multiple-policies-expected.txt
  30. combine-multiple-policies.html
  31. connect-src-beacon-allowed-expected.txt
  32. connect-src-beacon-allowed.html
  33. connect-src-beacon-blocked-expected.txt
  34. connect-src-beacon-blocked.html
  35. connect-src-eventsource-allowed-expected.txt
  36. connect-src-eventsource-allowed.html
  37. connect-src-eventsource-blocked-expected.txt
  38. connect-src-eventsource-blocked.html
  39. connect-src-eventsource-redirect-to-blocked-expected.txt
  40. connect-src-eventsource-redirect-to-blocked.html
  41. connect-src-star-secure-websocket-allowed-expected.txt
  42. connect-src-star-secure-websocket-allowed.html
  43. connect-src-star-websocket-allowed-expected.txt
  44. connect-src-star-websocket-allowed.html
  45. connect-src-websocket-allowed-expected.txt
  46. connect-src-websocket-allowed.html
  47. connect-src-websocket-blocked-expected.txt
  48. connect-src-websocket-blocked.html
  49. connect-src-xmlhttprequest-allowed-expected.txt
  50. connect-src-xmlhttprequest-allowed.html
  51. connect-src-xmlhttprequest-blocked-expected.txt
  52. connect-src-xmlhttprequest-blocked.html
  53. connect-src-xmlhttprequest-redirect-to-blocked-expected.txt
  54. connect-src-xmlhttprequest-redirect-to-blocked.html
  55. cross-origin-plugin-document-allowed-in-child-window-expected.txt
  56. cross-origin-plugin-document-allowed-in-child-window.html
  57. csp-header-is-sent-expected.txt
  58. csp-header-is-sent.html
  59. default-src-inline-allowed-expected.txt
  60. default-src-inline-allowed.html
  61. default-src-inline-blocked-expected.txt
  62. default-src-inline-blocked.html
  63. default-src-star-secure-websocket-allowed-expected.txt
  64. default-src-star-secure-websocket-allowed.html
  65. default-src-star-websocket-allowed-expected.txt
  66. default-src-star-websocket-allowed.html
  67. directive-parsing-01-expected.txt
  68. directive-parsing-01.html
  69. directive-parsing-02-expected.txt
  70. directive-parsing-02.html
  71. directive-parsing-03-expected.txt
  72. directive-parsing-03.html
  73. directive-parsing-04-expected.txt
  74. directive-parsing-04.html
  75. directive-parsing-05-expected.txt
  76. directive-parsing-05.html
  77. directive-parsing-multiple-headers-expected.txt
  78. directive-parsing-multiple-headers.html
  79. duplicate-directive-expected.txt
  80. duplicate-directive.html
  81. embed-redirect-allowed-expected.txt
  82. embed-redirect-allowed.html
  83. embed-redirect-allowed2-expected.txt
  84. embed-redirect-allowed2.html
  85. embed-redirect-blocked-expected.txt
  86. embed-redirect-blocked.html
  87. embed-redirect-blocked2-expected.txt
  88. embed-redirect-blocked2.html
  89. embed-redirect-blocked3-expected.txt
  90. embed-redirect-blocked3.html
  91. embed-src-url-blocked-expected.txt
  92. embed-src-url-blocked.html
  93. embed-src-url-blocked2-expected.txt
  94. embed-src-url-blocked2.html
  95. embed-with-no-url-allowed-by-default-src-star-expected.txt
  96. embed-with-no-url-allowed-by-default-src-star.html
  97. embed-with-no-url-allowed-by-star-expected.txt
  98. embed-with-no-url-allowed-by-star.html
  99. eval-allowed-expected.txt
  100. eval-allowed-in-report-only-mode-and-sends-report-expected.txt
  101. eval-allowed-in-report-only-mode-and-sends-report.py
  102. eval-allowed-in-report-only-mode-expected.txt
  103. eval-allowed-in-report-only-mode.py
  104. eval-allowed.html
  105. eval-blocked-and-sends-report-expected.txt
  106. eval-blocked-and-sends-report.html
  107. eval-blocked-expected.txt
  108. eval-blocked-in-about-blank-iframe-expected.txt
  109. eval-blocked-in-about-blank-iframe.html
  110. eval-blocked-in-external-script-expected.txt
  111. eval-blocked-in-external-script.html
  112. eval-blocked-in-subframe-expected.txt
  113. eval-blocked-in-subframe.html
  114. eval-blocked.html
  115. eval-scripts-setInterval-allowed-expected.txt
  116. eval-scripts-setInterval-allowed.html
  117. eval-scripts-setInterval-blocked-expected.txt
  118. eval-scripts-setInterval-blocked.html
  119. eval-scripts-setTimeout-allowed-expected.txt
  120. eval-scripts-setTimeout-allowed.html
  121. eval-scripts-setTimeout-blocked-expected.txt
  122. eval-scripts-setTimeout-blocked.html
  123. font-redirect-allowed-expected.txt
  124. font-redirect-allowed.html
  125. font-redirect-allowed2-expected.txt
  126. font-redirect-allowed2.html
  127. font-redirect-blocked-expected.txt
  128. font-redirect-blocked.html
  129. form-action-redirect-with-correct-blocked-uri-expected.txt
  130. form-action-redirect-with-correct-blocked-uri.html
  131. form-action-src-redirect-allowed-expected.txt
  132. form-action-src-redirect-allowed.html
  133. form-action-src-redirect-allowed2-expected.txt
  134. form-action-src-redirect-allowed2.html
  135. frame-src-about-blank-allowed-by-default-expected.txt
  136. frame-src-about-blank-allowed-by-default.html
  137. frame-src-about-blank-allowed-by-scheme-expected.txt
  138. frame-src-about-blank-allowed-by-scheme.html
  139. frame-src-allowed-expected.txt
  140. frame-src-allowed.html
  141. frame-src-blocked-expected.txt
  142. frame-src-blocked.html
  143. frame-src-cross-origin-load-expected.txt
  144. frame-src-cross-origin-load.html
  145. frame-src-redirect-blocked-expected.txt
  146. frame-src-redirect-blocked.html
  147. function-constructor-allowed-expected.txt
  148. function-constructor-allowed.html
  149. function-constructor-blocked-expected.txt
  150. function-constructor-blocked.html
  151. iframe-allowed-when-loaded-via-javascript-url-expected.txt
  152. iframe-allowed-when-loaded-via-javascript-url.html
  153. iframe-blank-url-programmatically-add-external-script-expected.txt
  154. iframe-blank-url-programmatically-add-external-script.html
  155. iframe-blocked-when-loaded-via-javascript-url-expected.txt
  156. iframe-blocked-when-loaded-via-javascript-url.html
  157. iframe-blocked-when-loaded-via-javascript-url2-expected.txt
  158. iframe-blocked-when-loaded-via-javascript-url2.html
  159. iframe-inside-csp-expected.txt
  160. iframe-inside-csp.html
  161. iframe-redirect-allowed-by-child-src-expected.txt
  162. iframe-redirect-allowed-by-child-src.html
  163. iframe-redirect-allowed-by-child-src2-expected.txt
  164. iframe-redirect-allowed-by-child-src2.html
  165. iframe-redirect-allowed-by-frame-src-expected.txt
  166. iframe-redirect-allowed-by-frame-src.html
  167. iframe-redirect-allowed-by-frame-src2-expected.txt
  168. iframe-redirect-allowed-by-frame-src2.html
  169. iframe-redirect-blocked-by-child-src-expected.txt
  170. iframe-redirect-blocked-by-child-src.html
  171. iframe-redirect-blocked-by-frame-src-expected.txt
  172. iframe-redirect-blocked-by-frame-src.html
  173. iframe-srcdoc-external-script-expected.txt
  174. iframe-srcdoc-external-script.html
  175. image-allowed-expected.txt
  176. image-allowed.html
  177. image-blocked-alt-text-expected.html
  178. image-blocked-alt-text.html
  179. image-blocked-expected.txt
  180. image-blocked-in-about-blank-window-expected.txt
  181. image-blocked-in-about-blank-window.html
  182. image-blocked.html
  183. image-data-URL-blocked-alt-text-expected.html
  184. image-data-URL-blocked-alt-text.html
  185. image-document-default-src-none-expected.txt
  186. image-document-default-src-none.html
  187. image-full-host-wildcard-allowed-expected.txt
  188. image-full-host-wildcard-allowed.html
  189. image-host-wildcard-allowed-expected.txt
  190. image-host-wildcard-allowed.html
  191. image-redirect-allowed-expected.txt
  192. image-redirect-allowed.html
  193. image-redirect-allowed2-expected.txt
  194. image-redirect-allowed2.html
  195. image-redirect-blocked-expected.txt
  196. image-redirect-blocked.html
  197. image-with-http-url-allowed-by-csp-img-src-star-expected.txt
  198. image-with-http-url-allowed-by-csp-img-src-star.html
  199. image-with-https-url-allowed-by-csp-img-src-star-expected.txt
  200. image-with-https-url-allowed-by-csp-img-src-star.html
  201. img-blocked-no-gc-crash-expected.txt
  202. img-blocked-no-gc-crash.html
  203. injected-inline-script-allowed-expected.txt
  204. injected-inline-script-allowed.html
  205. injected-inline-script-blocked-expected.txt
  206. injected-inline-script-blocked.html
  207. injected-inline-style-allowed-expected.txt
  208. injected-inline-style-allowed.html
  209. injected-inline-style-blocked-expected.txt
  210. injected-inline-style-blocked.html
  211. inline-event-handler-blocked-after-injecting-meta-expected.txt
  212. inline-event-handler-blocked-after-injecting-meta.html
  213. inline-script-allowed-expected.txt
  214. inline-script-allowed.html
  215. inline-script-blocked-expected.txt
  216. inline-script-blocked-goofy-expected.txt
  217. inline-script-blocked-goofy.html
  218. inline-script-blocked-javascript-url-expected.txt
  219. inline-script-blocked-javascript-url.html
  220. inline-script-blocked.html
  221. inline-style-allowed-expected.txt
  222. inline-style-allowed-while-cloning-objects-expected.txt
  223. inline-style-allowed-while-cloning-objects.html
  224. inline-style-allowed.html
  225. inline-style-attribute-allowed-expected.txt
  226. inline-style-attribute-allowed.html
  227. inline-style-attribute-blocked-expected.txt
  228. inline-style-attribute-blocked.html
  229. inline-style-attribute-on-html-expected.txt
  230. inline-style-attribute-on-html.html
  231. inline-style-blocked-expected.txt
  232. inline-style-blocked.html
  233. javascript-url-allowed-expected.txt
  234. javascript-url-allowed.html
  235. javascript-url-blocked-by-default-src-star-expected.txt
  236. javascript-url-blocked-by-default-src-star.html
  237. javascript-url-blocked-expected.txt
  238. javascript-url-blocked.html
  239. link-with-http-url-allowed-by-csp-style-src-star-expected.txt
  240. link-with-http-url-allowed-by-csp-style-src-star.html
  241. link-with-https-url-allowed-by-csp-style-src-star-expected.txt
  242. link-with-https-url-allowed-by-csp-style-src-star.html
  243. manifest-src-allowed-expected.txt
  244. manifest-src-allowed.html
  245. manifest-src-blocked-expected.txt
  246. manifest-src-blocked.html
  247. media-src-allowed-expected.txt
  248. media-src-allowed.html
  249. media-src-blocked-expected.txt
  250. media-src-blocked.html
  251. media-src-track-block-expected.txt
  252. media-src-track-block.html
  253. meta-tag-ignored-if-not-in-head-expected.txt
  254. meta-tag-ignored-if-not-in-head.html
  255. meta-tag-ignored-if-not-in-head2-expected.txt
  256. meta-tag-ignored-if-not-in-head2.html
  257. module-eval-blocked-expected.txt
  258. module-eval-blocked-in-external-script-expected.txt
  259. module-eval-blocked-in-external-script.html
  260. module-eval-blocked.html
  261. navigate-self-to-blob-expected.txt
  262. navigate-self-to-blob.html
  263. navigate-self-to-data-url-expected.txt
  264. navigate-self-to-data-url.html
  265. no-policy-expected.txt
  266. no-policy.html
  267. object-in-svg-foreignobject-expected.txt
  268. object-in-svg-foreignobject.html
  269. object-redirect-allowed-expected.txt
  270. object-redirect-allowed.html
  271. object-redirect-allowed2-expected.txt
  272. object-redirect-allowed2.html
  273. object-redirect-blocked-expected.txt
  274. object-redirect-blocked.html
  275. object-redirect-blocked2-expected.txt
  276. object-redirect-blocked2.html
  277. object-redirect-blocked3-expected.txt
  278. object-redirect-blocked3.html
  279. object-src-allows-embed-blocked-by-child-src-expected.txt
  280. object-src-allows-embed-blocked-by-child-src.html
  281. object-src-allows-embed-blocked-by-frame-src-expected.txt
  282. object-src-allows-embed-blocked-by-frame-src.html
  283. object-src-allows-object-blocked-by-child-src-expected.txt
  284. object-src-allows-object-blocked-by-child-src.html
  285. object-src-allows-object-blocked-by-frame-src-expected.txt
  286. object-src-allows-object-blocked-by-frame-src.html
  287. object-src-applet-archive-codebase-expected.txt
  288. object-src-applet-archive-codebase.html
  289. object-src-applet-archive-expected.txt
  290. object-src-applet-archive.html
  291. object-src-applet-code-codebase-expected.txt
  292. object-src-applet-code-codebase.html
  293. object-src-applet-code-expected.txt
  294. object-src-applet-code.html
  295. object-src-blocks-embed-allowed-by-child-src-expected.txt
  296. object-src-blocks-embed-allowed-by-child-src.html
  297. object-src-blocks-embed-allowed-by-frame-src-expected.txt
  298. object-src-blocks-embed-allowed-by-frame-src.html
  299. object-src-blocks-object-allowed-by-child-src-expected.txt
  300. object-src-blocks-object-allowed-by-child-src.html
  301. object-src-blocks-object-allowed-by-frame-src-expected.txt
  302. object-src-blocks-object-allowed-by-frame-src.html
  303. object-src-does-not-affect-child-expected.txt
  304. object-src-does-not-affect-child.html
  305. object-src-no-url-allowed-expected.txt
  306. object-src-no-url-allowed.html
  307. object-src-no-url-blocked-expected.txt
  308. object-src-no-url-blocked.html
  309. object-src-none-allowed-expected.txt
  310. object-src-none-allowed.html
  311. object-src-none-blocked-expected.txt
  312. object-src-none-blocked.html
  313. object-src-param-code-blocked-expected.txt
  314. object-src-param-code-blocked.html
  315. object-src-param-movie-blocked-expected.txt
  316. object-src-param-movie-blocked.html
  317. object-src-param-src-blocked-expected.txt
  318. object-src-param-src-blocked.html
  319. object-src-param-src-blocked2-expected.txt
  320. object-src-param-src-blocked2.html
  321. object-src-param-url-blocked-expected.txt
  322. object-src-param-url-blocked.html
  323. object-src-url-allowed-expected.txt
  324. object-src-url-allowed.html
  325. object-src-url-blocked-expected.txt
  326. object-src-url-blocked.html
  327. object-src-url-blocked2-expected.txt
  328. object-src-url-blocked2.html
  329. object-with-no-url-allowed-by-default-src-star-expected.txt
  330. object-with-no-url-allowed-by-default-src-star.html
  331. object-with-no-url-allowed-by-star-expected.txt
  332. object-with-no-url-allowed-by-star.html
  333. plugin-blocked-in-about-blank-window-expected.txt
  334. plugin-blocked-in-about-blank-window.html
  335. plugin-in-iframe-with-csp-expected.txt
  336. plugin-in-iframe-with-csp.html
  337. policy-does-not-affect-child-expected.txt
  338. policy-does-not-affect-child.html
  339. redirect-does-not-match-paths-expected.txt
  340. redirect-does-not-match-paths.html
  341. register-bypassing-scheme-expected.txt
  342. register-bypassing-scheme-partial-expected.txt
  343. register-bypassing-scheme-partial.html
  344. register-bypassing-scheme.html
  345. report-and-enforce-expected.txt
  346. report-and-enforce.py
  347. report-blocked-data-uri-expected.txt
  348. report-blocked-data-uri.py
  349. report-blocked-file-uri-expected.txt
  350. report-blocked-file-uri.py
  351. report-blocked-uri-after-blocked-redirect-expected.txt
  352. report-blocked-uri-after-blocked-redirect.html
  353. report-blocked-uri-after-multiple-redirects-expected.txt
  354. report-blocked-uri-after-multiple-redirects.html
  355. report-blocked-uri-and-do-not-follow-redirect-when-sending-report-expected.txt
  356. report-blocked-uri-and-do-not-follow-redirect-when-sending-report.py
  357. report-blocked-uri-cross-origin-expected.txt
  358. report-blocked-uri-cross-origin.py
  359. report-blocked-uri-expected.txt
  360. report-blocked-uri.py
  361. report-cross-origin-no-cookies-expected.txt
  362. report-cross-origin-no-cookies-when-private-browsing-enabled-expected.txt
  363. report-cross-origin-no-cookies-when-private-browsing-enabled.py
  364. report-cross-origin-no-cookies-when-private-browsing-toggled-expected.txt
  365. report-cross-origin-no-cookies-when-private-browsing-toggled.py
  366. report-cross-origin-no-cookies.py
  367. report-document-uri-after-blocked-redirect-expected.txt
  368. report-document-uri-after-blocked-redirect.html
  369. report-document-uri-blob-expected.txt
  370. report-document-uri-blob.html
  371. report-multiple-violations-01-expected.txt
  372. report-multiple-violations-01.py
  373. report-multiple-violations-02-expected.txt
  374. report-multiple-violations-02.py
  375. report-only-connect-src-beacon-redirect-blocked-expected.txt
  376. report-only-connect-src-beacon-redirect-blocked.py
  377. report-only-connect-src-xmlhttprequest-redirect-to-blocked-expected.txt
  378. report-only-connect-src-xmlhttprequest-redirect-to-blocked.py
  379. report-only-expected.txt
  380. report-only-from-header-expected.txt
  381. report-only-from-header.py
  382. report-only-meta-tag-ignored-if-not-in-head-expected.txt
  383. report-only-meta-tag-ignored-if-not-in-head.html
  384. report-only-meta-tag-ignored-if-not-in-head2-expected.txt
  385. report-only-meta-tag-ignored-if-not-in-head2.html
  386. report-only-report-uri-missing-expected.txt
  387. report-only-report-uri-missing.py
  388. report-only-upgrade-insecure-expected.txt
  389. report-only-upgrade-insecure.py
  390. report-only.py
  391. report-same-origin-no-cookies-when-private-browsing-toggled-expected.txt
  392. report-same-origin-no-cookies-when-private-browsing-toggled.py
  393. report-same-origin-with-cookies-expected.txt
  394. report-same-origin-with-cookies-when-private-browsing-enabled-expected.txt
  395. report-same-origin-with-cookies-when-private-browsing-enabled.py
  396. report-same-origin-with-cookies.py
  397. report-status-code-zero-when-using-https-expected.txt
  398. report-status-code-zero-when-using-https.html
  399. report-uri-expected.txt
  400. report-uri-from-child-frame-expected.txt
  401. report-uri-from-child-frame.html
  402. report-uri-from-inline-javascript-expected.txt
  403. report-uri-from-inline-javascript.py
  404. report-uri-from-javascript-expected.txt
  405. report-uri-from-javascript.py
  406. report-uri-in-meta-tag-ignored-expected.txt
  407. report-uri-in-meta-tag-ignored.html
  408. report-uri-scheme-relative-expected.txt
  409. report-uri-scheme-relative.py
  410. report-uri.py
  411. same-origin-plugin-document-allowed-in-child-window-expected.txt
  412. same-origin-plugin-document-allowed-in-child-window.html
  413. same-origin-plugin-document-blocked-in-child-window-expected.txt
  414. same-origin-plugin-document-blocked-in-child-window-report-expected.txt
  415. same-origin-plugin-document-blocked-in-child-window-report.py
  416. same-origin-plugin-document-blocked-in-child-window.html
  417. same-origin-plugin-document-with-csp-blocked-in-child-window-expected.txt
  418. same-origin-plugin-document-with-csp-blocked-in-child-window.html
  419. sandbox-allow-scripts-in-http-header-control-expected.txt
  420. sandbox-allow-scripts-in-http-header-control.html
  421. sandbox-allow-scripts-in-http-header-expected.txt
  422. sandbox-allow-scripts-in-http-header.html
  423. sandbox-allow-scripts-in-http-header2-expected.txt
  424. sandbox-allow-scripts-in-http-header2.py
  425. sandbox-empty-in-http-header-expected.txt
  426. sandbox-empty-in-http-header-inherited-by-subframe-expected.txt
  427. sandbox-empty-in-http-header-inherited-by-subframe.py
  428. sandbox-empty-in-http-header.py
  429. sandbox-in-http-header-control-expected.txt
  430. sandbox-in-http-header-control.html
  431. sandbox-in-http-header-expected.txt
  432. sandbox-in-http-header.html
  433. sandbox-in-meta-tag-ignored-expected.txt
  434. sandbox-in-meta-tag-ignored.html
  435. sandbox-invalid-header-expected.txt
  436. sandbox-invalid-header.html
  437. sandbox-report-only-expected.txt
  438. sandbox-report-only.html
  439. script-loads-with-img-src-expected.txt
  440. script-loads-with-img-src.html
  441. script-redirect-allowed-expected.txt
  442. script-redirect-allowed.html
  443. script-redirect-allowed2-expected.txt
  444. script-redirect-allowed2.html
  445. script-redirect-blocked-expected.txt
  446. script-redirect-blocked.html
  447. script-src-appended-script-expected.txt
  448. script-src-appended-script.html
  449. script-src-blocked-error-event-expected.txt
  450. script-src-blocked-error-event.html
  451. script-src-in-iframe-expected.txt
  452. script-src-in-iframe.html
  453. script-src-none-expected.txt
  454. script-src-none-inline-event-expected.txt
  455. script-src-none-inline-event.html
  456. script-src-none.html
  457. script-src-overrides-default-src-expected.txt
  458. script-src-overrides-default-src.html
  459. script-src-parsing-implicit-and-explicit-port-number-expected.txt
  460. script-src-parsing-implicit-and-explicit-port-number.html
  461. script-src-redirect-expected.txt
  462. script-src-redirect.html
  463. script-src-self-blocked-01-expected.txt
  464. script-src-self-blocked-01.html
  465. script-src-self-blocked-02-expected.txt
  466. script-src-self-blocked-02.html
  467. script-src-self-blocked-03-expected.txt
  468. script-src-self-blocked-03.html
  469. script-src-self-expected.txt
  470. script-src-self.html
  471. script-src-star-cross-scheme-expected.txt
  472. script-src-star-cross-scheme.html
  473. source-list-parsing-01-expected.txt
  474. source-list-parsing-01.html
  475. source-list-parsing-02-expected.txt
  476. source-list-parsing-02.html
  477. source-list-parsing-03-expected.txt
  478. source-list-parsing-03.html
  479. source-list-parsing-04-expected.txt
  480. source-list-parsing-04.html
  481. source-list-parsing-05-expected.txt
  482. source-list-parsing-05.html
  483. source-list-parsing-06-expected.txt
  484. source-list-parsing-06.html
  485. source-list-parsing-07-expected.txt
  486. source-list-parsing-07.html
  487. source-list-parsing-08-expected.txt
  488. source-list-parsing-08.html
  489. source-list-parsing-09-expected.txt
  490. source-list-parsing-09.html
  491. source-list-parsing-10-expected.txt
  492. source-list-parsing-10.html
  493. source-list-parsing-deprecated-expected.txt
  494. source-list-parsing-deprecated.html
  495. source-list-parsing-malformed-meta-expected.txt
  496. source-list-parsing-malformed-meta.html
  497. source-list-parsing-no-semicolon-expected.txt
  498. source-list-parsing-no-semicolon.html
  499. source-list-parsing-nonascii-expected.txt
  500. source-list-parsing-nonascii.html
  501. source-list-parsing-none-expected.txt
  502. source-list-parsing-none.html
  503. source-list-parsing-paths-01-expected.txt
  504. source-list-parsing-paths-01.html
  505. source-list-parsing-paths-02-expected.txt
  506. source-list-parsing-paths-02.html
  507. source-list-parsing-paths-03-expected.txt
  508. source-list-parsing-paths-03.html
  509. srcdoc-doesnt-bypass-script-src-expected.txt
  510. srcdoc-doesnt-bypass-script-src.html
  511. strict-dynamic-mixed-order-host-list-expected.txt
  512. strict-dynamic-mixed-order-host-list.html
  513. strict-dynamic-mixed-order-scheme-list-expected.txt
  514. strict-dynamic-mixed-order-scheme-list.html
  515. strict-dynamic-mixed-order-self-expected.txt
  516. strict-dynamic-mixed-order-self.html
  517. strict-dynamic-mixed-order-unsafe-inline-expected.txt
  518. strict-dynamic-mixed-order-unsafe-inline.html
  519. strict-dynamic-module-script-expected.txt
  520. strict-dynamic-module-script.html
  521. style-allowed-expected.txt
  522. style-allowed.html
  523. style-blocked-expected.txt
  524. style-blocked.html
  525. style-src-blocked-error-event-expected.txt
  526. style-src-blocked-error-event.html
  527. stylesheet-redirect-allowed-expected.txt
  528. stylesheet-redirect-allowed.html
  529. stylesheet-redirect-allowed2-expected.txt
  530. stylesheet-redirect-allowed2.html
  531. stylesheet-redirect-blocked-expected.txt
  532. stylesheet-redirect-blocked.html
  533. subframe-with-data-url-inheritance-expected.txt
  534. subframe-with-data-url-inheritance.html
  535. svg-font-redirect-allowed-expected.txt
  536. svg-font-redirect-allowed.html
  537. svg-font-redirect-allowed2-expected.txt
  538. svg-font-redirect-allowed2.html
  539. svg-font-redirect-blocked-expected.txt
  540. svg-font-redirect-blocked.html
  541. svg-image-redirect-allowed-expected.txt
  542. svg-image-redirect-allowed.html
  543. svg-image-redirect-allowed2-expected.txt
  544. svg-image-redirect-allowed2.html
  545. svg-image-redirect-blocked-expected.txt
  546. svg-image-redirect-blocked.html
  547. track-redirect-allowed-expected.txt
  548. track-redirect-allowed.html
  549. track-redirect-allowed2-expected.txt
  550. track-redirect-allowed2.html
  551. track-redirect-blocked-expected.txt
  552. track-redirect-blocked.html
  553. user-style-sheet-font-crasher-expected.txt
  554. user-style-sheet-font-crasher.py
  555. video-redirect-allowed-expected.txt
  556. video-redirect-allowed.html
  557. video-redirect-allowed2-expected.txt
  558. video-redirect-allowed2.html
  559. video-redirect-blocked-expected.txt
  560. video-redirect-blocked.html
  561. video-with-http-url-allowed-by-csp-media-src-star-expected.txt
  562. video-with-http-url-allowed-by-csp-media-src-star.html
  563. video-with-https-url-allowed-by-csp-media-src-star-expected.txt
  564. video-with-https-url-allowed-by-csp-media-src-star.html
  565. WebAssembly-allowed-expected.txt
  566. WebAssembly-allowed.html
  567. WebAssembly-blocked-expected.txt
  568. WebAssembly-blocked-in-about-blank-iframe-expected.txt
  569. WebAssembly-blocked-in-about-blank-iframe.html
  570. WebAssembly-blocked-in-external-script-expected.txt
  571. WebAssembly-blocked-in-external-script.html
  572. WebAssembly-blocked-in-subframe-expected.txt
  573. WebAssembly-blocked-in-subframe.html
  574. WebAssembly-blocked.html
  575. window-open-javascript-url-blocked-expected.txt
  576. window-open-javascript-url-blocked.html
  577. window-open-javascript-url-with-target-blocked-expected.txt
  578. window-open-javascript-url-with-target-blocked.html
  579. worker-blob-inherits-csp-blocks-eval-expected.txt
  580. worker-blob-inherits-csp-blocks-eval.html
  581. worker-blob-inherits-csp-expected.txt
  582. worker-blob-inherits-csp-importScripts-block-aborts-all-subsequent-imports-expected.txt
  583. worker-blob-inherits-csp-importScripts-block-aborts-all-subsequent-imports.html
  584. worker-blob-inherits-csp-importScripts-redirect-cross-origin-blocked-expected.txt
  585. worker-blob-inherits-csp-importScripts-redirect-cross-origin-blocked.html
  586. worker-blob-inherits-csp.html
  587. worker-blob-location-expected.txt
  588. worker-blob-location.html
  589. worker-connect-src-allowed-expected.txt
  590. worker-connect-src-allowed.html
  591. worker-connect-src-blocked-expected.txt
  592. worker-connect-src-blocked.html
  593. worker-csp-blocks-xhr-redirect-cross-origin-expected.txt
  594. worker-csp-blocks-xhr-redirect-cross-origin.html
  595. worker-csp-importScripts-redirect-cross-origin-allowed-expected.txt
  596. worker-csp-importScripts-redirect-cross-origin-allowed.html
  597. worker-csp-importScripts-redirect-cross-origin-blocked-expected.txt
  598. worker-csp-importScripts-redirect-cross-origin-blocked.html
  599. worker-eval-blocked-expected.txt
  600. worker-eval-blocked.html
  601. worker-function-function-blocked-expected.txt
  602. worker-function-function-blocked.html
  603. worker-importscripts-blocked-expected.txt
  604. worker-importscripts-blocked.html
  605. worker-multiple-csp-headers-expected.txt
  606. worker-multiple-csp-headers.html
  607. worker-redirect-allowed-expected.txt
  608. worker-redirect-allowed.html
  609. worker-script-src-expected.txt
  610. worker-script-src.html
  611. worker-set-timeout-blocked-expected.txt
  612. worker-set-timeout-blocked.html
  613. worker-without-csp-importScripts-redirect-cross-origin-allowed-expected.txt
  614. worker-without-csp-importScripts-redirect-cross-origin-allowed.html
  615. worker-without-own-csp-expected.txt
  616. worker-without-own-csp.html
  617. xmlhttprequest-protected-resource-does-not-crash-expected.txt
  618. xmlhttprequest-protected-resource-does-not-crash.html
  619. xsl-allowed-expected.txt
  620. xsl-allowed.py
  621. xsl-blocked-expected.txt
  622. xsl-blocked.py
  623. xsl-img-blocked-expected.txt
  624. xsl-img-blocked.py
  625. xsl-redirect-allowed-expected.txt
  626. xsl-redirect-allowed.html
  627. xsl-redirect-allowed2-expected.txt
  628. xsl-redirect-allowed2.html
  629. xsl-redirect-blocked-expected.txt
  630. xsl-redirect-blocked.html
  631. xsl-unaffected-by-style-src-1-expected.png
  632. xsl-unaffected-by-style-src-1-expected.txt
  633. xsl-unaffected-by-style-src-1.py
  634. xsl-unaffected-by-style-src-2-expected.txt
  635. xsl-unaffected-by-style-src-2.py