Sign in
webkit
/
WebKit
/
5018b83b58300de6a946efbfe8a7056c14da27e0
/
.
/
LayoutTests
/
http
/
tests
/
security
/
contentSecurityPolicy
tree: 1dd15dbd9ece43f6a25999bbd7d8db8412099c27 [
path history
]
[
tgz
]
1.1/
block-all-mixed-content/
manifest.test/
resources/
upgrade-insecure-requests/
userAgentShadowDOM/
allow-favicon-expected.txt
allow-favicon.html
audio-redirect-allowed-expected.txt
audio-redirect-allowed.html
audio-redirect-allowed2-expected.txt
audio-redirect-allowed2.html
audio-redirect-blocked-expected.txt
audio-redirect-blocked.html
blob-url-does-not-match-source-self-expected.html
blob-url-does-not-match-source-self.html
blob-url-matches-source-blob-expected.txt
blob-url-matches-source-blob.html
block-favicon-expected.txt
block-favicon.html
block-mixed-content-hides-warning-expected.txt
block-mixed-content-hides-warning.html
cached-frame-csp-expected.txt
cached-frame-csp.html
combine-multiple-policies-expected.txt
combine-multiple-policies.html
connect-src-beacon-allowed-expected.txt
connect-src-beacon-allowed.html
connect-src-beacon-blocked-expected.txt
connect-src-beacon-blocked.html
connect-src-eventsource-allowed-expected.txt
connect-src-eventsource-allowed.html
connect-src-eventsource-blocked-expected.txt
connect-src-eventsource-blocked.html
connect-src-eventsource-redirect-to-blocked-expected.txt
connect-src-eventsource-redirect-to-blocked.html
connect-src-star-secure-websocket-allowed-expected.txt
connect-src-star-secure-websocket-allowed.html
connect-src-star-websocket-allowed-expected.txt
connect-src-star-websocket-allowed.html
connect-src-websocket-allowed-expected.txt
connect-src-websocket-allowed.html
connect-src-websocket-blocked-expected.txt
connect-src-websocket-blocked.html
connect-src-xmlhttprequest-allowed-expected.txt
connect-src-xmlhttprequest-allowed.html
connect-src-xmlhttprequest-blocked-expected.txt
connect-src-xmlhttprequest-blocked.html
connect-src-xmlhttprequest-redirect-to-blocked-expected.txt
connect-src-xmlhttprequest-redirect-to-blocked.html
cross-origin-plugin-document-allowed-in-child-window-expected.txt
cross-origin-plugin-document-allowed-in-child-window.html
csp-header-is-sent-expected.txt
csp-header-is-sent.html
default-src-inline-allowed-expected.txt
default-src-inline-allowed.html
default-src-inline-blocked-expected.txt
default-src-inline-blocked.html
default-src-star-secure-websocket-allowed-expected.txt
default-src-star-secure-websocket-allowed.html
default-src-star-websocket-allowed-expected.txt
default-src-star-websocket-allowed.html
directive-parsing-01-expected.txt
directive-parsing-01.html
directive-parsing-02-expected.txt
directive-parsing-02.html
directive-parsing-03-expected.txt
directive-parsing-03.html
directive-parsing-04-expected.txt
directive-parsing-04.html
directive-parsing-05-expected.txt
directive-parsing-05.html
directive-parsing-multiple-headers-expected.txt
directive-parsing-multiple-headers.html
duplicate-directive-expected.txt
duplicate-directive.html
embed-redirect-allowed-expected.txt
embed-redirect-allowed.html
embed-redirect-allowed2-expected.txt
embed-redirect-allowed2.html
embed-redirect-blocked-expected.txt
embed-redirect-blocked.html
embed-redirect-blocked2-expected.txt
embed-redirect-blocked2.html
embed-redirect-blocked3-expected.txt
embed-redirect-blocked3.html
embed-src-url-blocked-expected.txt
embed-src-url-blocked.html
embed-src-url-blocked2-expected.txt
embed-src-url-blocked2.html
embed-with-no-url-allowed-by-default-src-star-expected.txt
embed-with-no-url-allowed-by-default-src-star.html
embed-with-no-url-allowed-by-star-expected.txt
embed-with-no-url-allowed-by-star.html
eval-allowed-expected.txt
eval-allowed-in-report-only-mode-and-sends-report-expected.txt
eval-allowed-in-report-only-mode-and-sends-report.php
eval-allowed-in-report-only-mode-expected.txt
eval-allowed-in-report-only-mode.php
eval-allowed.html
eval-blocked-and-sends-report-expected.txt
eval-blocked-and-sends-report.html
eval-blocked-expected.txt
eval-blocked-in-about-blank-iframe-expected.txt
eval-blocked-in-about-blank-iframe.html
eval-blocked-in-external-script-expected.txt
eval-blocked-in-external-script.html
eval-blocked-in-subframe-expected.txt
eval-blocked-in-subframe.html
eval-blocked.html
eval-scripts-setInterval-allowed-expected.txt
eval-scripts-setInterval-allowed.html
eval-scripts-setInterval-blocked-expected.txt
eval-scripts-setInterval-blocked.html
eval-scripts-setTimeout-allowed-expected.txt
eval-scripts-setTimeout-allowed.html
eval-scripts-setTimeout-blocked-expected.txt
eval-scripts-setTimeout-blocked.html
font-redirect-allowed-expected.txt
font-redirect-allowed.html
font-redirect-allowed2-expected.txt
font-redirect-allowed2.html
font-redirect-blocked-expected.txt
font-redirect-blocked.html
form-action-src-redirect-allowed-expected.txt
form-action-src-redirect-allowed.html
form-action-src-redirect-allowed2-expected.txt
form-action-src-redirect-allowed2.html
frame-src-about-blank-allowed-by-default-expected.txt
frame-src-about-blank-allowed-by-default.html
frame-src-about-blank-allowed-by-scheme-expected.txt
frame-src-about-blank-allowed-by-scheme.html
frame-src-allowed-expected.txt
frame-src-allowed.html
frame-src-blocked-expected.txt
frame-src-blocked.html
frame-src-cross-origin-load-expected.txt
frame-src-cross-origin-load.html
frame-src-redirect-blocked-expected.txt
frame-src-redirect-blocked.html
function-constructor-allowed-expected.txt
function-constructor-allowed.html
function-constructor-blocked-expected.txt
function-constructor-blocked.html
iframe-allowed-when-loaded-via-javascript-url-expected.txt
iframe-allowed-when-loaded-via-javascript-url.html
iframe-blank-url-programmatically-add-external-script-expected.txt
iframe-blank-url-programmatically-add-external-script.html
iframe-blocked-when-loaded-via-javascript-url-expected.txt
iframe-blocked-when-loaded-via-javascript-url.html
iframe-blocked-when-loaded-via-javascript-url2-expected.txt
iframe-blocked-when-loaded-via-javascript-url2.html
iframe-inside-csp-expected.txt
iframe-inside-csp.html
iframe-redirect-allowed-by-child-src-expected.txt
iframe-redirect-allowed-by-child-src.html
iframe-redirect-allowed-by-child-src2-expected.txt
iframe-redirect-allowed-by-child-src2.html
iframe-redirect-allowed-by-frame-src-expected.txt
iframe-redirect-allowed-by-frame-src.html
iframe-redirect-allowed-by-frame-src2-expected.txt
iframe-redirect-allowed-by-frame-src2.html
iframe-redirect-blocked-by-child-src-expected.txt
iframe-redirect-blocked-by-child-src.html
iframe-redirect-blocked-by-frame-src-expected.txt
iframe-redirect-blocked-by-frame-src.html
iframe-srcdoc-external-script-expected.txt
iframe-srcdoc-external-script.html
image-allowed-expected.txt
image-allowed.html
image-blocked-alt-text-expected.html
image-blocked-alt-text.html
image-blocked-expected.txt
image-blocked-in-about-blank-window-expected.txt
image-blocked-in-about-blank-window.html
image-blocked.html
image-data-URL-blocked-alt-text-expected.html
image-data-URL-blocked-alt-text.html
image-document-default-src-none-expected.txt
image-document-default-src-none.html
image-full-host-wildcard-allowed-expected.txt
image-full-host-wildcard-allowed.html
image-host-wildcard-allowed-expected.txt
image-host-wildcard-allowed.html
image-redirect-allowed-expected.txt
image-redirect-allowed.html
image-redirect-allowed2-expected.txt
image-redirect-allowed2.html
image-redirect-blocked-expected.txt
image-redirect-blocked.html
image-with-http-url-allowed-by-csp-img-src-star-expected.txt
image-with-http-url-allowed-by-csp-img-src-star.html
image-with-https-url-allowed-by-csp-img-src-star-expected.txt
image-with-https-url-allowed-by-csp-img-src-star.html
img-blocked-no-gc-crash-expected.txt
img-blocked-no-gc-crash.html
injected-inline-script-allowed-expected.txt
injected-inline-script-allowed.html
injected-inline-script-blocked-expected.txt
injected-inline-script-blocked.html
injected-inline-style-allowed-expected.txt
injected-inline-style-allowed.html
injected-inline-style-blocked-expected.txt
injected-inline-style-blocked.html
inline-event-handler-blocked-after-injecting-meta-expected.txt
inline-event-handler-blocked-after-injecting-meta.html
inline-script-allowed-expected.txt
inline-script-allowed.html
inline-script-blocked-expected.txt
inline-script-blocked-goofy-expected.txt
inline-script-blocked-goofy.html
inline-script-blocked-javascript-url-expected.txt
inline-script-blocked-javascript-url.html
inline-script-blocked.html
inline-style-allowed-expected.txt
inline-style-allowed-while-cloning-objects-expected.txt
inline-style-allowed-while-cloning-objects.html
inline-style-allowed.html
inline-style-attribute-allowed-expected.txt
inline-style-attribute-allowed.html
inline-style-attribute-blocked-expected.txt
inline-style-attribute-blocked.html
inline-style-attribute-on-html-expected.txt
inline-style-attribute-on-html.html
inline-style-blocked-expected.txt
inline-style-blocked.html
javascript-url-allowed-expected.txt
javascript-url-allowed.html
javascript-url-blocked-by-default-src-star-expected.txt
javascript-url-blocked-by-default-src-star.html
javascript-url-blocked-expected.txt
javascript-url-blocked.html
link-with-http-url-allowed-by-csp-style-src-star-expected.txt
link-with-http-url-allowed-by-csp-style-src-star.html
link-with-https-url-allowed-by-csp-style-src-star-expected.txt
link-with-https-url-allowed-by-csp-style-src-star.html
manifest-src-allowed-expected.txt
manifest-src-allowed.html
manifest-src-blocked-expected.txt
manifest-src-blocked.html
media-src-allowed-expected.txt
media-src-allowed.html
media-src-blocked-expected.txt
media-src-blocked.html
media-src-track-block-expected.txt
media-src-track-block.html
meta-tag-ignored-if-not-in-head-expected.txt
meta-tag-ignored-if-not-in-head.html
meta-tag-ignored-if-not-in-head2-expected.txt
meta-tag-ignored-if-not-in-head2.html
module-eval-blocked-expected.txt
module-eval-blocked-in-external-script-expected.txt
module-eval-blocked-in-external-script.html
module-eval-blocked.html
navigate-self-to-blob-expected.txt
navigate-self-to-blob.html
navigate-self-to-data-url-expected.txt
navigate-self-to-data-url.html
no-policy-expected.txt
no-policy.html
object-in-svg-foreignobject-expected.txt
object-in-svg-foreignobject.html
object-redirect-allowed-expected.txt
object-redirect-allowed.html
object-redirect-allowed2-expected.txt
object-redirect-allowed2.html
object-redirect-blocked-expected.txt
object-redirect-blocked.html
object-redirect-blocked2-expected.txt
object-redirect-blocked2.html
object-redirect-blocked3-expected.txt
object-redirect-blocked3.html
object-src-allows-embed-blocked-by-child-src-expected.txt
object-src-allows-embed-blocked-by-child-src.html
object-src-allows-embed-blocked-by-frame-src-expected.txt
object-src-allows-embed-blocked-by-frame-src.html
object-src-allows-object-blocked-by-child-src-expected.txt
object-src-allows-object-blocked-by-child-src.html
object-src-allows-object-blocked-by-frame-src-expected.txt
object-src-allows-object-blocked-by-frame-src.html
object-src-applet-archive-codebase-expected.txt
object-src-applet-archive-codebase.html
object-src-applet-archive-expected.txt
object-src-applet-archive.html
object-src-applet-code-codebase-expected.txt
object-src-applet-code-codebase.html
object-src-applet-code-expected.txt
object-src-applet-code.html
object-src-blocks-embed-allowed-by-child-src-expected.txt
object-src-blocks-embed-allowed-by-child-src.html
object-src-blocks-embed-allowed-by-frame-src-expected.txt
object-src-blocks-embed-allowed-by-frame-src.html
object-src-blocks-object-allowed-by-child-src-expected.txt
object-src-blocks-object-allowed-by-child-src.html
object-src-blocks-object-allowed-by-frame-src-expected.txt
object-src-blocks-object-allowed-by-frame-src.html
object-src-does-not-affect-child-expected.txt
object-src-does-not-affect-child.html
object-src-no-url-allowed-expected.txt
object-src-no-url-allowed.html
object-src-no-url-blocked-expected.txt
object-src-no-url-blocked.html
object-src-none-allowed-expected.txt
object-src-none-allowed.html
object-src-none-blocked-expected.txt
object-src-none-blocked.html
object-src-param-code-blocked-expected.txt
object-src-param-code-blocked.html
object-src-param-movie-blocked-expected.txt
object-src-param-movie-blocked.html
object-src-param-src-blocked-expected.txt
object-src-param-src-blocked.html
object-src-param-src-blocked2-expected.txt
object-src-param-src-blocked2.html
object-src-param-url-blocked-expected.txt
object-src-param-url-blocked.html
object-src-url-allowed-expected.txt
object-src-url-allowed.html
object-src-url-blocked-expected.txt
object-src-url-blocked.html
object-src-url-blocked2-expected.txt
object-src-url-blocked2.html
object-with-no-url-allowed-by-default-src-star-expected.txt
object-with-no-url-allowed-by-default-src-star.html
object-with-no-url-allowed-by-star-expected.txt
object-with-no-url-allowed-by-star.html
plugin-blocked-in-about-blank-window-expected.txt
plugin-blocked-in-about-blank-window.html
plugin-in-iframe-with-csp-expected.txt
plugin-in-iframe-with-csp.html
policy-does-not-affect-child-expected.txt
policy-does-not-affect-child.html
redirect-does-not-match-paths-expected.txt
redirect-does-not-match-paths.html
register-bypassing-scheme-expected.txt
register-bypassing-scheme-partial-expected.txt
register-bypassing-scheme-partial.html
register-bypassing-scheme.html
report-and-enforce-expected.txt
report-and-enforce.php
report-blocked-data-uri-expected.txt
report-blocked-data-uri.php
report-blocked-file-uri-expected.txt
report-blocked-file-uri.php
report-blocked-uri-and-do-not-follow-redirect-when-sending-report-expected.txt
report-blocked-uri-and-do-not-follow-redirect-when-sending-report.php
report-blocked-uri-cross-origin-expected.txt
report-blocked-uri-cross-origin.php
report-blocked-uri-expected.txt
report-blocked-uri.php
report-cross-origin-no-cookies-expected.txt
report-cross-origin-no-cookies-when-private-browsing-enabled-expected.txt
report-cross-origin-no-cookies-when-private-browsing-enabled.php
report-cross-origin-no-cookies-when-private-browsing-toggled-expected.txt
report-cross-origin-no-cookies-when-private-browsing-toggled.php
report-cross-origin-no-cookies.php
report-multiple-violations-01-expected.txt
report-multiple-violations-01.php
report-multiple-violations-02-expected.txt
report-multiple-violations-02.php
report-only-connect-src-beacon-redirect-blocked-expected.txt
report-only-connect-src-beacon-redirect-blocked.php
report-only-connect-src-xmlhttprequest-redirect-to-blocked-expected.txt
report-only-connect-src-xmlhttprequest-redirect-to-blocked.php
report-only-expected.txt
report-only-from-header-expected.txt
report-only-from-header.php
report-only-meta-tag-ignored-if-not-in-head-expected.txt
report-only-meta-tag-ignored-if-not-in-head.html
report-only-meta-tag-ignored-if-not-in-head2-expected.txt
report-only-meta-tag-ignored-if-not-in-head2.html
report-only-report-uri-missing-expected.txt
report-only-report-uri-missing.php
report-only-upgrade-insecure-expected.txt
report-only-upgrade-insecure.php
report-only.php
report-same-origin-no-cookies-when-private-browsing-toggled-expected.txt
report-same-origin-no-cookies-when-private-browsing-toggled.php
report-same-origin-with-cookies-expected.txt
report-same-origin-with-cookies-when-private-browsing-enabled-expected.txt
report-same-origin-with-cookies-when-private-browsing-enabled.php
report-same-origin-with-cookies.php
report-status-code-zero-when-using-https-expected.txt
report-status-code-zero-when-using-https.html
report-uri-expected.txt
report-uri-from-child-frame-expected.txt
report-uri-from-child-frame.html
report-uri-from-inline-javascript-expected.txt
report-uri-from-inline-javascript.php
report-uri-from-javascript-expected.txt
report-uri-from-javascript.php
report-uri-in-meta-tag-ignored-expected.txt
report-uri-in-meta-tag-ignored.html
report-uri-scheme-relative-expected.txt
report-uri-scheme-relative.php
report-uri.php
same-origin-plugin-document-allowed-in-child-window-expected.txt
same-origin-plugin-document-allowed-in-child-window.html
same-origin-plugin-document-blocked-in-child-window-expected.txt
same-origin-plugin-document-blocked-in-child-window-report-expected.txt
same-origin-plugin-document-blocked-in-child-window-report.php
same-origin-plugin-document-blocked-in-child-window.html
same-origin-plugin-document-with-csp-blocked-in-child-window-expected.txt
same-origin-plugin-document-with-csp-blocked-in-child-window.html
sandbox-allow-scripts-in-http-header-control-expected.txt
sandbox-allow-scripts-in-http-header-control.html
sandbox-allow-scripts-in-http-header-expected.txt
sandbox-allow-scripts-in-http-header.html
sandbox-allow-scripts-in-http-header2-expected.txt
sandbox-allow-scripts-in-http-header2.php
sandbox-empty-in-http-header-expected.txt
sandbox-empty-in-http-header-inherited-by-subframe-expected.txt
sandbox-empty-in-http-header-inherited-by-subframe.php
sandbox-empty-in-http-header.php
sandbox-in-http-header-control-expected.txt
sandbox-in-http-header-control.html
sandbox-in-http-header-expected.txt
sandbox-in-http-header.html
sandbox-in-meta-tag-ignored-expected.txt
sandbox-in-meta-tag-ignored.html
sandbox-invalid-header-expected.txt
sandbox-invalid-header.html
sandbox-report-only-expected.txt
sandbox-report-only.html
script-loads-with-img-src-expected.txt
script-loads-with-img-src.html
script-redirect-allowed-expected.txt
script-redirect-allowed.html
script-redirect-allowed2-expected.txt
script-redirect-allowed2.html
script-redirect-blocked-expected.txt
script-redirect-blocked.html
script-src-appended-script-expected.txt
script-src-appended-script.html
script-src-blocked-error-event-expected.txt
script-src-blocked-error-event.html
script-src-in-iframe-expected.txt
script-src-in-iframe.html
script-src-none-expected.txt
script-src-none-inline-event-expected.txt
script-src-none-inline-event.html
script-src-none.html
script-src-overrides-default-src-expected.txt
script-src-overrides-default-src.html
script-src-parsing-implicit-and-explicit-port-number-expected.txt
script-src-parsing-implicit-and-explicit-port-number.html
script-src-redirect-expected.txt
script-src-redirect.html
script-src-self-blocked-01-expected.txt
script-src-self-blocked-01.html
script-src-self-blocked-02-expected.txt
script-src-self-blocked-02.html
script-src-self-blocked-03-expected.txt
script-src-self-blocked-03.html
script-src-self-expected.txt
script-src-self.html
script-src-star-cross-scheme-expected.txt
script-src-star-cross-scheme.html
source-list-parsing-01-expected.txt
source-list-parsing-01.html
source-list-parsing-02-expected.txt
source-list-parsing-02.html
source-list-parsing-03-expected.txt
source-list-parsing-03.html
source-list-parsing-04-expected.txt
source-list-parsing-04.html
source-list-parsing-05-expected.txt
source-list-parsing-05.html
source-list-parsing-06-expected.txt
source-list-parsing-06.html
source-list-parsing-07-expected.txt
source-list-parsing-07.html
source-list-parsing-08-expected.txt
source-list-parsing-08.html
source-list-parsing-09-expected.txt
source-list-parsing-09.html
source-list-parsing-10-expected.txt
source-list-parsing-10.html
source-list-parsing-deprecated-expected.txt
source-list-parsing-deprecated.html
source-list-parsing-malformed-meta-expected.txt
source-list-parsing-malformed-meta.html
source-list-parsing-no-semicolon-expected.txt
source-list-parsing-no-semicolon.html
source-list-parsing-nonascii-expected.txt
source-list-parsing-nonascii.html
source-list-parsing-none-expected.txt
source-list-parsing-none.html
source-list-parsing-paths-01-expected.txt
source-list-parsing-paths-01.html
source-list-parsing-paths-02-expected.txt
source-list-parsing-paths-02.html
source-list-parsing-paths-03-expected.txt
source-list-parsing-paths-03.html
srcdoc-doesnt-bypass-script-src-expected.txt
srcdoc-doesnt-bypass-script-src.html
style-allowed-expected.txt
style-allowed.html
style-blocked-expected.txt
style-blocked.html
style-src-blocked-error-event-expected.txt
style-src-blocked-error-event.html
stylesheet-redirect-allowed-expected.txt
stylesheet-redirect-allowed.html
stylesheet-redirect-allowed2-expected.txt
stylesheet-redirect-allowed2.html
stylesheet-redirect-blocked-expected.txt
stylesheet-redirect-blocked.html
subframe-with-data-url-inheritance-expected.txt
subframe-with-data-url-inheritance.html
svg-font-redirect-allowed-expected.txt
svg-font-redirect-allowed.html
svg-font-redirect-allowed2-expected.txt
svg-font-redirect-allowed2.html
svg-font-redirect-blocked-expected.txt
svg-font-redirect-blocked.html
svg-image-redirect-allowed-expected.txt
svg-image-redirect-allowed.html
svg-image-redirect-allowed2-expected.txt
svg-image-redirect-allowed2.html
svg-image-redirect-blocked-expected.txt
svg-image-redirect-blocked.html
track-redirect-allowed-expected.txt
track-redirect-allowed.html
track-redirect-allowed2-expected.txt
track-redirect-allowed2.html
track-redirect-blocked-expected.txt
track-redirect-blocked.html
user-style-sheet-font-crasher-expected.txt
user-style-sheet-font-crasher.php
video-redirect-allowed-expected.txt
video-redirect-allowed.html
video-redirect-allowed2-expected.txt
video-redirect-allowed2.html
video-redirect-blocked-expected.txt
video-redirect-blocked.html
video-with-http-url-allowed-by-csp-media-src-star-expected.txt
video-with-http-url-allowed-by-csp-media-src-star.html
video-with-https-url-allowed-by-csp-media-src-star-expected.txt
video-with-https-url-allowed-by-csp-media-src-star.html
WebAssembly-allowed-expected.txt
WebAssembly-allowed.html
WebAssembly-blocked-expected.txt
WebAssembly-blocked-in-about-blank-iframe-expected.txt
WebAssembly-blocked-in-about-blank-iframe.html
WebAssembly-blocked-in-external-script-expected.txt
WebAssembly-blocked-in-external-script.html
WebAssembly-blocked-in-subframe-expected.txt
WebAssembly-blocked-in-subframe.html
WebAssembly-blocked.html
window-open-javascript-url-blocked-expected.txt
window-open-javascript-url-blocked.html
window-open-javascript-url-with-target-blocked-expected.txt
window-open-javascript-url-with-target-blocked.html
worker-blob-inherits-csp-blocks-eval-expected.txt
worker-blob-inherits-csp-blocks-eval.html
worker-blob-inherits-csp-expected.txt
worker-blob-inherits-csp-importScripts-block-aborts-all-subsequent-imports-expected.txt
worker-blob-inherits-csp-importScripts-block-aborts-all-subsequent-imports.html
worker-blob-inherits-csp-importScripts-redirect-cross-origin-blocked-expected.txt
worker-blob-inherits-csp-importScripts-redirect-cross-origin-blocked.html
worker-blob-inherits-csp.html
worker-blob-location-expected.txt
worker-blob-location.html
worker-connect-src-allowed-expected.txt
worker-connect-src-allowed.html
worker-connect-src-blocked-expected.txt
worker-connect-src-blocked.html
worker-csp-blocks-xhr-redirect-cross-origin-expected.txt
worker-csp-blocks-xhr-redirect-cross-origin.html
worker-csp-importScripts-redirect-cross-origin-allowed-expected.txt
worker-csp-importScripts-redirect-cross-origin-allowed.html
worker-csp-importScripts-redirect-cross-origin-blocked-expected.txt
worker-csp-importScripts-redirect-cross-origin-blocked.html
worker-eval-blocked-expected.txt
worker-eval-blocked.html
worker-function-function-blocked-expected.txt
worker-function-function-blocked.html
worker-importscripts-blocked-expected.txt
worker-importscripts-blocked.html
worker-multiple-csp-headers-expected.txt
worker-multiple-csp-headers.html
worker-redirect-allowed-expected.txt
worker-redirect-allowed.html
worker-script-src-expected.txt
worker-script-src.html
worker-set-timeout-blocked-expected.txt
worker-set-timeout-blocked.html
worker-without-csp-importScripts-redirect-cross-origin-allowed-expected.txt
worker-without-csp-importScripts-redirect-cross-origin-allowed.html
worker-without-own-csp-expected.txt
worker-without-own-csp.html
xmlhttprequest-protected-resource-does-not-crash-expected.txt
xmlhttprequest-protected-resource-does-not-crash.html
xsl-allowed-expected.txt
xsl-allowed.php
xsl-blocked-expected.txt
xsl-blocked.php
xsl-img-blocked-expected.txt
xsl-img-blocked.php
xsl-redirect-allowed-expected.txt
xsl-redirect-allowed.html
xsl-redirect-allowed2-expected.txt
xsl-redirect-allowed2.html
xsl-redirect-blocked-expected.txt
xsl-redirect-blocked.html
xsl-unaffected-by-style-src-1-expected.png
xsl-unaffected-by-style-src-1-expected.txt
xsl-unaffected-by-style-src-1.php
xsl-unaffected-by-style-src-2-expected.txt
xsl-unaffected-by-style-src-2.php