Google Git
Sign in
webkit / WebKit / 69a7b74912bac36f8b22ecde7a51522c768c4c9c / . / LayoutTests / http / tests / security / contentSecurityPolicy
tree: 2ffd5cfd4c9362ce3754127e58801466000b8dab [path history] [tgz]
  1. 1.1/
  2. block-all-mixed-content/
  3. manifest.test/
  4. resources/
  5. upgrade-insecure-requests/
  6. userAgentShadowDOM/
  7. allow-favicon-expected.txt
  8. allow-favicon.html
  9. audio-redirect-allowed-expected.txt
  10. audio-redirect-allowed.html
  11. audio-redirect-allowed2-expected.txt
  12. audio-redirect-allowed2.html
  13. audio-redirect-blocked-expected.txt
  14. audio-redirect-blocked.html
  15. blob-url-does-not-match-source-self-expected.html
  16. blob-url-does-not-match-source-self.html
  17. blob-url-matches-source-blob-expected.txt
  18. blob-url-matches-source-blob.html
  19. block-favicon-expected.txt
  20. block-favicon.html
  21. block-mixed-content-hides-warning-expected.txt
  22. block-mixed-content-hides-warning.html
  23. cached-frame-csp-expected.txt
  24. cached-frame-csp.html
  25. combine-multiple-policies-expected.txt
  26. combine-multiple-policies.html
  27. connect-src-beacon-allowed-expected.txt
  28. connect-src-beacon-allowed.html
  29. connect-src-beacon-blocked-expected.txt
  30. connect-src-beacon-blocked.html
  31. connect-src-eventsource-allowed-expected.txt
  32. connect-src-eventsource-allowed.html
  33. connect-src-eventsource-blocked-expected.txt
  34. connect-src-eventsource-blocked.html
  35. connect-src-eventsource-redirect-to-blocked-expected.txt
  36. connect-src-eventsource-redirect-to-blocked.html
  37. connect-src-star-secure-websocket-allowed-expected.txt
  38. connect-src-star-secure-websocket-allowed.html
  39. connect-src-star-websocket-allowed-expected.txt
  40. connect-src-star-websocket-allowed.html
  41. connect-src-websocket-allowed-expected.txt
  42. connect-src-websocket-allowed.html
  43. connect-src-websocket-blocked-expected.txt
  44. connect-src-websocket-blocked.html
  45. connect-src-xmlhttprequest-allowed-expected.txt
  46. connect-src-xmlhttprequest-allowed.html
  47. connect-src-xmlhttprequest-blocked-expected.txt
  48. connect-src-xmlhttprequest-blocked.html
  49. connect-src-xmlhttprequest-redirect-to-blocked-expected.txt
  50. connect-src-xmlhttprequest-redirect-to-blocked.html
  51. cross-origin-plugin-document-allowed-in-child-window-expected.txt
  52. cross-origin-plugin-document-allowed-in-child-window.html
  53. csp-header-is-sent-expected.txt
  54. csp-header-is-sent.html
  55. default-src-inline-allowed-expected.txt
  56. default-src-inline-allowed.html
  57. default-src-inline-blocked-expected.txt
  58. default-src-inline-blocked.html
  59. default-src-star-secure-websocket-allowed-expected.txt
  60. default-src-star-secure-websocket-allowed.html
  61. default-src-star-websocket-allowed-expected.txt
  62. default-src-star-websocket-allowed.html
  63. directive-parsing-01-expected.txt
  64. directive-parsing-01.html
  65. directive-parsing-02-expected.txt
  66. directive-parsing-02.html
  67. directive-parsing-03-expected.txt
  68. directive-parsing-03.html
  69. directive-parsing-04-expected.txt
  70. directive-parsing-04.html
  71. directive-parsing-05-expected.txt
  72. directive-parsing-05.html
  73. directive-parsing-multiple-headers-expected.txt
  74. directive-parsing-multiple-headers.html
  75. duplicate-directive-expected.txt
  76. duplicate-directive.html
  77. embed-redirect-allowed-expected.txt
  78. embed-redirect-allowed.html
  79. embed-redirect-allowed2-expected.txt
  80. embed-redirect-allowed2.html
  81. embed-redirect-blocked-expected.txt
  82. embed-redirect-blocked.html
  83. embed-redirect-blocked2-expected.txt
  84. embed-redirect-blocked2.html
  85. embed-redirect-blocked3-expected.txt
  86. embed-redirect-blocked3.html
  87. embed-src-url-blocked-expected.txt
  88. embed-src-url-blocked.html
  89. embed-src-url-blocked2-expected.txt
  90. embed-src-url-blocked2.html
  91. embed-with-no-url-allowed-by-default-src-star-expected.txt
  92. embed-with-no-url-allowed-by-default-src-star.html
  93. embed-with-no-url-allowed-by-star-expected.txt
  94. embed-with-no-url-allowed-by-star.html
  95. eval-allowed-expected.txt
  96. eval-allowed-in-report-only-mode-and-sends-report-expected.txt
  97. eval-allowed-in-report-only-mode-and-sends-report.php
  98. eval-allowed-in-report-only-mode-expected.txt
  99. eval-allowed-in-report-only-mode.php
  100. eval-allowed.html
  101. eval-blocked-and-sends-report-expected.txt
  102. eval-blocked-and-sends-report.html
  103. eval-blocked-expected.txt
  104. eval-blocked-in-about-blank-iframe-expected.txt
  105. eval-blocked-in-about-blank-iframe.html
  106. eval-blocked-in-external-script-expected.txt
  107. eval-blocked-in-external-script.html
  108. eval-blocked-in-subframe-expected.txt
  109. eval-blocked-in-subframe.html
  110. eval-blocked.html
  111. eval-scripts-setInterval-allowed-expected.txt
  112. eval-scripts-setInterval-allowed.html
  113. eval-scripts-setInterval-blocked-expected.txt
  114. eval-scripts-setInterval-blocked.html
  115. eval-scripts-setTimeout-allowed-expected.txt
  116. eval-scripts-setTimeout-allowed.html
  117. eval-scripts-setTimeout-blocked-expected.txt
  118. eval-scripts-setTimeout-blocked.html
  119. font-redirect-allowed-expected.txt
  120. font-redirect-allowed.html
  121. font-redirect-allowed2-expected.txt
  122. font-redirect-allowed2.html
  123. font-redirect-blocked-expected.txt
  124. font-redirect-blocked.html
  125. form-action-src-redirect-allowed-expected.txt
  126. form-action-src-redirect-allowed.html
  127. form-action-src-redirect-allowed2-expected.txt
  128. form-action-src-redirect-allowed2.html
  129. frame-src-about-blank-allowed-by-default-expected.txt
  130. frame-src-about-blank-allowed-by-default.html
  131. frame-src-about-blank-allowed-by-scheme-expected.txt
  132. frame-src-about-blank-allowed-by-scheme.html
  133. frame-src-allowed-expected.txt
  134. frame-src-allowed.html
  135. frame-src-blocked-expected.txt
  136. frame-src-blocked.html
  137. frame-src-cross-origin-load-expected.txt
  138. frame-src-cross-origin-load.html
  139. frame-src-redirect-blocked-expected.txt
  140. frame-src-redirect-blocked.html
  141. function-constructor-allowed-expected.txt
  142. function-constructor-allowed.html
  143. function-constructor-blocked-expected.txt
  144. function-constructor-blocked.html
  145. iframe-blank-url-programmatically-add-external-script-expected.txt
  146. iframe-blank-url-programmatically-add-external-script.html
  147. iframe-inside-csp-expected.txt
  148. iframe-inside-csp.html
  149. iframe-redirect-allowed-by-child-src-expected.txt
  150. iframe-redirect-allowed-by-child-src.html
  151. iframe-redirect-allowed-by-child-src2-expected.txt
  152. iframe-redirect-allowed-by-child-src2.html
  153. iframe-redirect-allowed-by-frame-src-expected.txt
  154. iframe-redirect-allowed-by-frame-src.html
  155. iframe-redirect-allowed-by-frame-src2-expected.txt
  156. iframe-redirect-allowed-by-frame-src2.html
  157. iframe-redirect-blocked-by-child-src-expected.txt
  158. iframe-redirect-blocked-by-child-src.html
  159. iframe-redirect-blocked-by-frame-src-expected.txt
  160. iframe-redirect-blocked-by-frame-src.html
  161. iframe-srcdoc-external-script-expected.txt
  162. iframe-srcdoc-external-script.html
  163. image-allowed-expected.txt
  164. image-allowed.html
  165. image-blocked-alt-text-expected.html
  166. image-blocked-alt-text.html
  167. image-blocked-expected.txt
  168. image-blocked-in-about-blank-window-expected.txt
  169. image-blocked-in-about-blank-window.html
  170. image-blocked.html
  171. image-data-URL-blocked-alt-text-expected.html
  172. image-data-URL-blocked-alt-text.html
  173. image-document-default-src-none-expected.txt
  174. image-document-default-src-none.html
  175. image-full-host-wildcard-allowed-expected.txt
  176. image-full-host-wildcard-allowed.html
  177. image-host-wildcard-allowed-expected.txt
  178. image-host-wildcard-allowed.html
  179. image-redirect-allowed-expected.txt
  180. image-redirect-allowed.html
  181. image-redirect-allowed2-expected.txt
  182. image-redirect-allowed2.html
  183. image-redirect-blocked-expected.txt
  184. image-redirect-blocked.html
  185. image-with-http-url-allowed-by-csp-img-src-star-expected.txt
  186. image-with-http-url-allowed-by-csp-img-src-star.html
  187. image-with-https-url-allowed-by-csp-img-src-star-expected.txt
  188. image-with-https-url-allowed-by-csp-img-src-star.html
  189. img-blocked-no-gc-crash-expected.txt
  190. img-blocked-no-gc-crash.html
  191. injected-inline-script-allowed-expected.txt
  192. injected-inline-script-allowed.html
  193. injected-inline-script-blocked-expected.txt
  194. injected-inline-script-blocked.html
  195. injected-inline-style-allowed-expected.txt
  196. injected-inline-style-allowed.html
  197. injected-inline-style-blocked-expected.txt
  198. injected-inline-style-blocked.html
  199. inline-event-handler-blocked-after-injecting-meta-expected.txt
  200. inline-event-handler-blocked-after-injecting-meta.html
  201. inline-script-allowed-expected.txt
  202. inline-script-allowed.html
  203. inline-script-blocked-expected.txt
  204. inline-script-blocked-goofy-expected.txt
  205. inline-script-blocked-goofy.html
  206. inline-script-blocked-javascript-url-expected.txt
  207. inline-script-blocked-javascript-url.html
  208. inline-script-blocked.html
  209. inline-style-allowed-expected.txt
  210. inline-style-allowed-while-cloning-objects-expected.txt
  211. inline-style-allowed-while-cloning-objects.html
  212. inline-style-allowed.html
  213. inline-style-attribute-allowed-expected.txt
  214. inline-style-attribute-allowed.html
  215. inline-style-attribute-blocked-expected.txt
  216. inline-style-attribute-blocked.html
  217. inline-style-attribute-on-html-expected.txt
  218. inline-style-attribute-on-html.html
  219. inline-style-blocked-expected.txt
  220. inline-style-blocked.html
  221. javascript-url-allowed-expected.txt
  222. javascript-url-allowed.html
  223. javascript-url-blocked-by-default-src-star-expected.txt
  224. javascript-url-blocked-by-default-src-star.html
  225. javascript-url-blocked-expected.txt
  226. javascript-url-blocked.html
  227. link-with-http-url-allowed-by-csp-style-src-star-expected.txt
  228. link-with-http-url-allowed-by-csp-style-src-star.html
  229. link-with-https-url-allowed-by-csp-style-src-star-expected.txt
  230. link-with-https-url-allowed-by-csp-style-src-star.html
  231. manifest-src-allowed-expected.txt
  232. manifest-src-allowed.html
  233. manifest-src-blocked-expected.txt
  234. manifest-src-blocked.html
  235. media-src-allowed-expected.txt
  236. media-src-allowed.html
  237. media-src-blocked-expected.txt
  238. media-src-blocked.html
  239. media-src-track-block-expected.txt
  240. media-src-track-block.html
  241. meta-tag-ignored-if-not-in-head-expected.txt
  242. meta-tag-ignored-if-not-in-head.html
  243. meta-tag-ignored-if-not-in-head2-expected.txt
  244. meta-tag-ignored-if-not-in-head2.html
  245. module-eval-blocked-expected.txt
  246. module-eval-blocked-in-external-script-expected.txt
  247. module-eval-blocked-in-external-script.html
  248. module-eval-blocked.html
  249. no-policy-expected.txt
  250. no-policy.html
  251. object-in-svg-foreignobject-expected.txt
  252. object-in-svg-foreignobject.html
  253. object-redirect-allowed-expected.txt
  254. object-redirect-allowed.html
  255. object-redirect-allowed2-expected.txt
  256. object-redirect-allowed2.html
  257. object-redirect-blocked-expected.txt
  258. object-redirect-blocked.html
  259. object-redirect-blocked2-expected.txt
  260. object-redirect-blocked2.html
  261. object-redirect-blocked3-expected.txt
  262. object-redirect-blocked3.html
  263. object-src-allows-embed-blocked-by-child-src-expected.txt
  264. object-src-allows-embed-blocked-by-child-src.html
  265. object-src-allows-embed-blocked-by-frame-src-expected.txt
  266. object-src-allows-embed-blocked-by-frame-src.html
  267. object-src-allows-object-blocked-by-child-src-expected.txt
  268. object-src-allows-object-blocked-by-child-src.html
  269. object-src-allows-object-blocked-by-frame-src-expected.txt
  270. object-src-allows-object-blocked-by-frame-src.html
  271. object-src-applet-archive-codebase-expected.txt
  272. object-src-applet-archive-codebase.html
  273. object-src-applet-archive-expected.txt
  274. object-src-applet-archive.html
  275. object-src-applet-code-codebase-expected.txt
  276. object-src-applet-code-codebase.html
  277. object-src-applet-code-expected.txt
  278. object-src-applet-code.html
  279. object-src-blocks-embed-allowed-by-child-src-expected.txt
  280. object-src-blocks-embed-allowed-by-child-src.html
  281. object-src-blocks-embed-allowed-by-frame-src-expected.txt
  282. object-src-blocks-embed-allowed-by-frame-src.html
  283. object-src-blocks-object-allowed-by-child-src-expected.txt
  284. object-src-blocks-object-allowed-by-child-src.html
  285. object-src-blocks-object-allowed-by-frame-src-expected.txt
  286. object-src-blocks-object-allowed-by-frame-src.html
  287. object-src-does-not-affect-child-expected.txt
  288. object-src-does-not-affect-child.html
  289. object-src-no-url-allowed-expected.txt
  290. object-src-no-url-allowed.html
  291. object-src-no-url-blocked-expected.txt
  292. object-src-no-url-blocked.html
  293. object-src-none-allowed-expected.txt
  294. object-src-none-allowed.html
  295. object-src-none-blocked-expected.txt
  296. object-src-none-blocked.html
  297. object-src-param-code-blocked-expected.txt
  298. object-src-param-code-blocked.html
  299. object-src-param-movie-blocked-expected.txt
  300. object-src-param-movie-blocked.html
  301. object-src-param-src-blocked-expected.txt
  302. object-src-param-src-blocked.html
  303. object-src-param-src-blocked2-expected.txt
  304. object-src-param-src-blocked2.html
  305. object-src-param-url-blocked-expected.txt
  306. object-src-param-url-blocked.html
  307. object-src-url-allowed-expected.txt
  308. object-src-url-allowed.html
  309. object-src-url-blocked-expected.txt
  310. object-src-url-blocked.html
  311. object-src-url-blocked2-expected.txt
  312. object-src-url-blocked2.html
  313. object-with-no-url-allowed-by-default-src-star-expected.txt
  314. object-with-no-url-allowed-by-default-src-star.html
  315. object-with-no-url-allowed-by-star-expected.txt
  316. object-with-no-url-allowed-by-star.html
  317. plugin-blocked-in-about-blank-window-expected.txt
  318. plugin-blocked-in-about-blank-window.html
  319. plugin-in-iframe-with-csp-expected.txt
  320. plugin-in-iframe-with-csp.html
  321. policy-does-not-affect-child-expected.txt
  322. policy-does-not-affect-child.html
  323. redirect-does-not-match-paths-expected.txt
  324. redirect-does-not-match-paths.html
  325. register-bypassing-scheme-expected.txt
  326. register-bypassing-scheme-partial-expected.txt
  327. register-bypassing-scheme-partial.html
  328. register-bypassing-scheme.html
  329. report-and-enforce-expected.txt
  330. report-and-enforce.php
  331. report-blocked-data-uri-expected.txt
  332. report-blocked-data-uri.php
  333. report-blocked-file-uri-expected.txt
  334. report-blocked-file-uri.php
  335. report-blocked-uri-and-do-not-follow-redirect-when-sending-report-expected.txt
  336. report-blocked-uri-and-do-not-follow-redirect-when-sending-report.php
  337. report-blocked-uri-cross-origin-expected.txt
  338. report-blocked-uri-cross-origin.php
  339. report-blocked-uri-expected.txt
  340. report-blocked-uri.php
  341. report-cross-origin-no-cookies-expected.txt
  342. report-cross-origin-no-cookies-when-private-browsing-enabled-expected.txt
  343. report-cross-origin-no-cookies-when-private-browsing-enabled.php
  344. report-cross-origin-no-cookies-when-private-browsing-toggled-expected.txt
  345. report-cross-origin-no-cookies-when-private-browsing-toggled.php
  346. report-cross-origin-no-cookies.php
  347. report-multiple-violations-01-expected.txt
  348. report-multiple-violations-01.php
  349. report-multiple-violations-02-expected.txt
  350. report-multiple-violations-02.php
  351. report-only-connect-src-beacon-redirect-blocked-expected.txt
  352. report-only-connect-src-beacon-redirect-blocked.php
  353. report-only-connect-src-xmlhttprequest-redirect-to-blocked-expected.txt
  354. report-only-connect-src-xmlhttprequest-redirect-to-blocked.php
  355. report-only-expected.txt
  356. report-only-from-header-expected.txt
  357. report-only-from-header.php
  358. report-only-meta-tag-ignored-if-not-in-head-expected.txt
  359. report-only-meta-tag-ignored-if-not-in-head.html
  360. report-only-meta-tag-ignored-if-not-in-head2-expected.txt
  361. report-only-meta-tag-ignored-if-not-in-head2.html
  362. report-only-report-uri-missing-expected.txt
  363. report-only-report-uri-missing.php
  364. report-only-upgrade-insecure-expected.txt
  365. report-only-upgrade-insecure.php
  366. report-only.php
  367. report-same-origin-no-cookies-when-private-browsing-toggled-expected.txt
  368. report-same-origin-no-cookies-when-private-browsing-toggled.php
  369. report-same-origin-with-cookies-expected.txt
  370. report-same-origin-with-cookies-when-private-browsing-enabled-expected.txt
  371. report-same-origin-with-cookies-when-private-browsing-enabled.php
  372. report-same-origin-with-cookies.php
  373. report-status-code-zero-when-using-https-expected.txt
  374. report-status-code-zero-when-using-https.html
  375. report-uri-expected.txt
  376. report-uri-from-child-frame-expected.txt
  377. report-uri-from-child-frame.html
  378. report-uri-from-inline-javascript-expected.txt
  379. report-uri-from-inline-javascript.php
  380. report-uri-from-javascript-expected.txt
  381. report-uri-from-javascript.php
  382. report-uri-in-meta-tag-ignored-expected.txt
  383. report-uri-in-meta-tag-ignored.html
  384. report-uri-scheme-relative-expected.txt
  385. report-uri-scheme-relative.php
  386. report-uri.php
  387. same-origin-plugin-document-allowed-in-child-window-expected.txt
  388. same-origin-plugin-document-allowed-in-child-window.html
  389. same-origin-plugin-document-blocked-in-child-window-expected.txt
  390. same-origin-plugin-document-blocked-in-child-window-report-expected.txt
  391. same-origin-plugin-document-blocked-in-child-window-report.php
  392. same-origin-plugin-document-blocked-in-child-window.html
  393. same-origin-plugin-document-with-csp-blocked-in-child-window-expected.txt
  394. same-origin-plugin-document-with-csp-blocked-in-child-window.html
  395. sandbox-allow-scripts-in-http-header-control-expected.txt
  396. sandbox-allow-scripts-in-http-header-control.html
  397. sandbox-allow-scripts-in-http-header-expected.txt
  398. sandbox-allow-scripts-in-http-header.html
  399. sandbox-allow-scripts-in-http-header2-expected.txt
  400. sandbox-allow-scripts-in-http-header2.php
  401. sandbox-empty-in-http-header-expected.txt
  402. sandbox-empty-in-http-header-inherited-by-subframe-expected.txt
  403. sandbox-empty-in-http-header-inherited-by-subframe.php
  404. sandbox-empty-in-http-header.php
  405. sandbox-in-http-header-control-expected.txt
  406. sandbox-in-http-header-control.html
  407. sandbox-in-http-header-expected.txt
  408. sandbox-in-http-header.html
  409. sandbox-in-meta-tag-ignored-expected.txt
  410. sandbox-in-meta-tag-ignored.html
  411. sandbox-invalid-header-expected.txt
  412. sandbox-invalid-header.html
  413. sandbox-report-only-expected.txt
  414. sandbox-report-only.html
  415. script-loads-with-img-src-expected.txt
  416. script-loads-with-img-src.html
  417. script-redirect-allowed-expected.txt
  418. script-redirect-allowed.html
  419. script-redirect-allowed2-expected.txt
  420. script-redirect-allowed2.html
  421. script-redirect-blocked-expected.txt
  422. script-redirect-blocked.html
  423. script-src-appended-script-expected.txt
  424. script-src-appended-script.html
  425. script-src-blocked-error-event-expected.txt
  426. script-src-blocked-error-event.html
  427. script-src-in-iframe-expected.txt
  428. script-src-in-iframe.html
  429. script-src-none-expected.txt
  430. script-src-none-inline-event-expected.txt
  431. script-src-none-inline-event.html
  432. script-src-none.html
  433. script-src-overrides-default-src-expected.txt
  434. script-src-overrides-default-src.html
  435. script-src-parsing-implicit-and-explicit-port-number-expected.txt
  436. script-src-parsing-implicit-and-explicit-port-number.html
  437. script-src-redirect-expected.txt
  438. script-src-redirect.html
  439. script-src-self-blocked-01-expected.txt
  440. script-src-self-blocked-01.html
  441. script-src-self-blocked-02-expected.txt
  442. script-src-self-blocked-02.html
  443. script-src-self-blocked-03-expected.txt
  444. script-src-self-blocked-03.html
  445. script-src-self-expected.txt
  446. script-src-self.html
  447. script-src-star-cross-scheme-expected.txt
  448. script-src-star-cross-scheme.html
  449. source-list-parsing-01-expected.txt
  450. source-list-parsing-01.html
  451. source-list-parsing-02-expected.txt
  452. source-list-parsing-02.html
  453. source-list-parsing-03-expected.txt
  454. source-list-parsing-03.html
  455. source-list-parsing-04-expected.txt
  456. source-list-parsing-04.html
  457. source-list-parsing-05-expected.txt
  458. source-list-parsing-05.html
  459. source-list-parsing-06-expected.txt
  460. source-list-parsing-06.html
  461. source-list-parsing-07-expected.txt
  462. source-list-parsing-07.html
  463. source-list-parsing-08-expected.txt
  464. source-list-parsing-08.html
  465. source-list-parsing-09-expected.txt
  466. source-list-parsing-09.html
  467. source-list-parsing-10-expected.txt
  468. source-list-parsing-10.html
  469. source-list-parsing-deprecated-expected.txt
  470. source-list-parsing-deprecated.html
  471. source-list-parsing-malformed-meta-expected.txt
  472. source-list-parsing-malformed-meta.html
  473. source-list-parsing-no-semicolon-expected.txt
  474. source-list-parsing-no-semicolon.html
  475. source-list-parsing-nonascii-expected.txt
  476. source-list-parsing-nonascii.html
  477. source-list-parsing-none-expected.txt
  478. source-list-parsing-none.html
  479. source-list-parsing-paths-01-expected.txt
  480. source-list-parsing-paths-01.html
  481. source-list-parsing-paths-02-expected.txt
  482. source-list-parsing-paths-02.html
  483. source-list-parsing-paths-03-expected.txt
  484. source-list-parsing-paths-03.html
  485. srcdoc-doesnt-bypass-script-src-expected.txt
  486. srcdoc-doesnt-bypass-script-src.html
  487. style-allowed-expected.txt
  488. style-allowed.html
  489. style-blocked-expected.txt
  490. style-blocked.html
  491. style-src-blocked-error-event-expected.txt
  492. style-src-blocked-error-event.html
  493. stylesheet-redirect-allowed-expected.txt
  494. stylesheet-redirect-allowed.html
  495. stylesheet-redirect-allowed2-expected.txt
  496. stylesheet-redirect-allowed2.html
  497. stylesheet-redirect-blocked-expected.txt
  498. stylesheet-redirect-blocked.html
  499. svg-font-redirect-allowed-expected.txt
  500. svg-font-redirect-allowed.html
  501. svg-font-redirect-allowed2-expected.txt
  502. svg-font-redirect-allowed2.html
  503. svg-font-redirect-blocked-expected.txt
  504. svg-font-redirect-blocked.html
  505. svg-image-redirect-allowed-expected.txt
  506. svg-image-redirect-allowed.html
  507. svg-image-redirect-allowed2-expected.txt
  508. svg-image-redirect-allowed2.html
  509. svg-image-redirect-blocked-expected.txt
  510. svg-image-redirect-blocked.html
  511. track-redirect-allowed-expected.txt
  512. track-redirect-allowed.html
  513. track-redirect-allowed2-expected.txt
  514. track-redirect-allowed2.html
  515. track-redirect-blocked-expected.txt
  516. track-redirect-blocked.html
  517. user-style-sheet-font-crasher-expected.txt
  518. user-style-sheet-font-crasher.php
  519. video-redirect-allowed-expected.txt
  520. video-redirect-allowed.html
  521. video-redirect-allowed2-expected.txt
  522. video-redirect-allowed2.html
  523. video-redirect-blocked-expected.txt
  524. video-redirect-blocked.html
  525. video-with-http-url-allowed-by-csp-media-src-star-expected.txt
  526. video-with-http-url-allowed-by-csp-media-src-star.html
  527. video-with-https-url-allowed-by-csp-media-src-star-expected.txt
  528. video-with-https-url-allowed-by-csp-media-src-star.html
  529. WebAssembly-allowed-expected.txt
  530. WebAssembly-allowed.html
  531. WebAssembly-blocked-expected.txt
  532. WebAssembly-blocked-in-about-blank-iframe-expected.txt
  533. WebAssembly-blocked-in-about-blank-iframe.html
  534. WebAssembly-blocked-in-external-script-expected.txt
  535. WebAssembly-blocked-in-external-script.html
  536. WebAssembly-blocked-in-subframe-expected.txt
  537. WebAssembly-blocked-in-subframe.html
  538. WebAssembly-blocked.html
  539. window-open-javascript-url-blocked-expected.txt
  540. window-open-javascript-url-blocked.html
  541. window-open-javascript-url-with-target-blocked-expected.txt
  542. window-open-javascript-url-with-target-blocked.html
  543. worker-blob-inherits-csp-blocks-eval-expected.txt
  544. worker-blob-inherits-csp-blocks-eval.html
  545. worker-blob-inherits-csp-expected.txt
  546. worker-blob-inherits-csp-importScripts-block-aborts-all-subsequent-imports-expected.txt
  547. worker-blob-inherits-csp-importScripts-block-aborts-all-subsequent-imports.html
  548. worker-blob-inherits-csp-importScripts-redirect-cross-origin-blocked-expected.txt
  549. worker-blob-inherits-csp-importScripts-redirect-cross-origin-blocked.html
  550. worker-blob-inherits-csp.html
  551. worker-connect-src-allowed-expected.txt
  552. worker-connect-src-allowed.html
  553. worker-connect-src-blocked-expected.txt
  554. worker-connect-src-blocked.html
  555. worker-csp-blocks-xhr-redirect-cross-origin-expected.txt
  556. worker-csp-blocks-xhr-redirect-cross-origin.html
  557. worker-csp-importScripts-redirect-cross-origin-allowed-expected.txt
  558. worker-csp-importScripts-redirect-cross-origin-allowed.html
  559. worker-csp-importScripts-redirect-cross-origin-blocked-expected.txt
  560. worker-csp-importScripts-redirect-cross-origin-blocked.html
  561. worker-eval-blocked-expected.txt
  562. worker-eval-blocked.html
  563. worker-function-function-blocked-expected.txt
  564. worker-function-function-blocked.html
  565. worker-importscripts-blocked-expected.txt
  566. worker-importscripts-blocked.html
  567. worker-multiple-csp-headers-expected.txt
  568. worker-multiple-csp-headers.html
  569. worker-redirect-allowed-expected.txt
  570. worker-redirect-allowed.html
  571. worker-script-src-expected.txt
  572. worker-script-src.html
  573. worker-set-timeout-blocked-expected.txt
  574. worker-set-timeout-blocked.html
  575. worker-without-csp-importScripts-redirect-cross-origin-allowed-expected.txt
  576. worker-without-csp-importScripts-redirect-cross-origin-allowed.html
  577. worker-without-own-csp-expected.txt
  578. worker-without-own-csp.html
  579. xmlhttprequest-protected-resource-does-not-crash-expected.txt
  580. xmlhttprequest-protected-resource-does-not-crash.html
  581. xsl-allowed-expected.txt
  582. xsl-allowed.php
  583. xsl-blocked-expected.txt
  584. xsl-blocked.php
  585. xsl-img-blocked-expected.txt
  586. xsl-img-blocked.php
  587. xsl-redirect-allowed-expected.txt
  588. xsl-redirect-allowed.html
  589. xsl-redirect-allowed2-expected.txt
  590. xsl-redirect-allowed2.html
  591. xsl-redirect-blocked-expected.txt
  592. xsl-redirect-blocked.html
  593. xsl-unaffected-by-style-src-1-expected.png
  594. xsl-unaffected-by-style-src-1-expected.txt
  595. xsl-unaffected-by-style-src-1.php
  596. xsl-unaffected-by-style-src-2-expected.txt
  597. xsl-unaffected-by-style-src-2.php