Google Git
Sign in
webkit / WebKit / 939e9d9dca352ef0e519c767220f928dea5a0c13 / . / LayoutTests / http / tests / security / contentSecurityPolicy
tree: 1dd15dbd9ece43f6a25999bbd7d8db8412099c27 [path history] [tgz]
  1. 1.1/
  2. block-all-mixed-content/
  3. manifest.test/
  4. resources/
  5. upgrade-insecure-requests/
  6. userAgentShadowDOM/
  7. allow-favicon-expected.txt
  8. allow-favicon.html
  9. audio-redirect-allowed-expected.txt
  10. audio-redirect-allowed.html
  11. audio-redirect-allowed2-expected.txt
  12. audio-redirect-allowed2.html
  13. audio-redirect-blocked-expected.txt
  14. audio-redirect-blocked.html
  15. blob-url-does-not-match-source-self-expected.html
  16. blob-url-does-not-match-source-self.html
  17. blob-url-matches-source-blob-expected.txt
  18. blob-url-matches-source-blob.html
  19. block-favicon-expected.txt
  20. block-favicon.html
  21. block-mixed-content-hides-warning-expected.txt
  22. block-mixed-content-hides-warning.html
  23. cached-frame-csp-expected.txt
  24. cached-frame-csp.html
  25. combine-multiple-policies-expected.txt
  26. combine-multiple-policies.html
  27. connect-src-beacon-allowed-expected.txt
  28. connect-src-beacon-allowed.html
  29. connect-src-beacon-blocked-expected.txt
  30. connect-src-beacon-blocked.html
  31. connect-src-eventsource-allowed-expected.txt
  32. connect-src-eventsource-allowed.html
  33. connect-src-eventsource-blocked-expected.txt
  34. connect-src-eventsource-blocked.html
  35. connect-src-eventsource-redirect-to-blocked-expected.txt
  36. connect-src-eventsource-redirect-to-blocked.html
  37. connect-src-star-secure-websocket-allowed-expected.txt
  38. connect-src-star-secure-websocket-allowed.html
  39. connect-src-star-websocket-allowed-expected.txt
  40. connect-src-star-websocket-allowed.html
  41. connect-src-websocket-allowed-expected.txt
  42. connect-src-websocket-allowed.html
  43. connect-src-websocket-blocked-expected.txt
  44. connect-src-websocket-blocked.html
  45. connect-src-xmlhttprequest-allowed-expected.txt
  46. connect-src-xmlhttprequest-allowed.html
  47. connect-src-xmlhttprequest-blocked-expected.txt
  48. connect-src-xmlhttprequest-blocked.html
  49. connect-src-xmlhttprequest-redirect-to-blocked-expected.txt
  50. connect-src-xmlhttprequest-redirect-to-blocked.html
  51. cross-origin-plugin-document-allowed-in-child-window-expected.txt
  52. cross-origin-plugin-document-allowed-in-child-window.html
  53. csp-header-is-sent-expected.txt
  54. csp-header-is-sent.html
  55. default-src-inline-allowed-expected.txt
  56. default-src-inline-allowed.html
  57. default-src-inline-blocked-expected.txt
  58. default-src-inline-blocked.html
  59. default-src-star-secure-websocket-allowed-expected.txt
  60. default-src-star-secure-websocket-allowed.html
  61. default-src-star-websocket-allowed-expected.txt
  62. default-src-star-websocket-allowed.html
  63. directive-parsing-01-expected.txt
  64. directive-parsing-01.html
  65. directive-parsing-02-expected.txt
  66. directive-parsing-02.html
  67. directive-parsing-03-expected.txt
  68. directive-parsing-03.html
  69. directive-parsing-04-expected.txt
  70. directive-parsing-04.html
  71. directive-parsing-05-expected.txt
  72. directive-parsing-05.html
  73. directive-parsing-multiple-headers-expected.txt
  74. directive-parsing-multiple-headers.html
  75. duplicate-directive-expected.txt
  76. duplicate-directive.html
  77. embed-redirect-allowed-expected.txt
  78. embed-redirect-allowed.html
  79. embed-redirect-allowed2-expected.txt
  80. embed-redirect-allowed2.html
  81. embed-redirect-blocked-expected.txt
  82. embed-redirect-blocked.html
  83. embed-redirect-blocked2-expected.txt
  84. embed-redirect-blocked2.html
  85. embed-redirect-blocked3-expected.txt
  86. embed-redirect-blocked3.html
  87. embed-src-url-blocked-expected.txt
  88. embed-src-url-blocked.html
  89. embed-src-url-blocked2-expected.txt
  90. embed-src-url-blocked2.html
  91. embed-with-no-url-allowed-by-default-src-star-expected.txt
  92. embed-with-no-url-allowed-by-default-src-star.html
  93. embed-with-no-url-allowed-by-star-expected.txt
  94. embed-with-no-url-allowed-by-star.html
  95. eval-allowed-expected.txt
  96. eval-allowed-in-report-only-mode-and-sends-report-expected.txt
  97. eval-allowed-in-report-only-mode-and-sends-report.php
  98. eval-allowed-in-report-only-mode-expected.txt
  99. eval-allowed-in-report-only-mode.php
  100. eval-allowed.html
  101. eval-blocked-and-sends-report-expected.txt
  102. eval-blocked-and-sends-report.html
  103. eval-blocked-expected.txt
  104. eval-blocked-in-about-blank-iframe-expected.txt
  105. eval-blocked-in-about-blank-iframe.html
  106. eval-blocked-in-external-script-expected.txt
  107. eval-blocked-in-external-script.html
  108. eval-blocked-in-subframe-expected.txt
  109. eval-blocked-in-subframe.html
  110. eval-blocked.html
  111. eval-scripts-setInterval-allowed-expected.txt
  112. eval-scripts-setInterval-allowed.html
  113. eval-scripts-setInterval-blocked-expected.txt
  114. eval-scripts-setInterval-blocked.html
  115. eval-scripts-setTimeout-allowed-expected.txt
  116. eval-scripts-setTimeout-allowed.html
  117. eval-scripts-setTimeout-blocked-expected.txt
  118. eval-scripts-setTimeout-blocked.html
  119. font-redirect-allowed-expected.txt
  120. font-redirect-allowed.html
  121. font-redirect-allowed2-expected.txt
  122. font-redirect-allowed2.html
  123. font-redirect-blocked-expected.txt
  124. font-redirect-blocked.html
  125. form-action-src-redirect-allowed-expected.txt
  126. form-action-src-redirect-allowed.html
  127. form-action-src-redirect-allowed2-expected.txt
  128. form-action-src-redirect-allowed2.html
  129. frame-src-about-blank-allowed-by-default-expected.txt
  130. frame-src-about-blank-allowed-by-default.html
  131. frame-src-about-blank-allowed-by-scheme-expected.txt
  132. frame-src-about-blank-allowed-by-scheme.html
  133. frame-src-allowed-expected.txt
  134. frame-src-allowed.html
  135. frame-src-blocked-expected.txt
  136. frame-src-blocked.html
  137. frame-src-cross-origin-load-expected.txt
  138. frame-src-cross-origin-load.html
  139. frame-src-redirect-blocked-expected.txt
  140. frame-src-redirect-blocked.html
  141. function-constructor-allowed-expected.txt
  142. function-constructor-allowed.html
  143. function-constructor-blocked-expected.txt
  144. function-constructor-blocked.html
  145. iframe-allowed-when-loaded-via-javascript-url-expected.txt
  146. iframe-allowed-when-loaded-via-javascript-url.html
  147. iframe-blank-url-programmatically-add-external-script-expected.txt
  148. iframe-blank-url-programmatically-add-external-script.html
  149. iframe-blocked-when-loaded-via-javascript-url-expected.txt
  150. iframe-blocked-when-loaded-via-javascript-url.html
  151. iframe-blocked-when-loaded-via-javascript-url2-expected.txt
  152. iframe-blocked-when-loaded-via-javascript-url2.html
  153. iframe-inside-csp-expected.txt
  154. iframe-inside-csp.html
  155. iframe-redirect-allowed-by-child-src-expected.txt
  156. iframe-redirect-allowed-by-child-src.html
  157. iframe-redirect-allowed-by-child-src2-expected.txt
  158. iframe-redirect-allowed-by-child-src2.html
  159. iframe-redirect-allowed-by-frame-src-expected.txt
  160. iframe-redirect-allowed-by-frame-src.html
  161. iframe-redirect-allowed-by-frame-src2-expected.txt
  162. iframe-redirect-allowed-by-frame-src2.html
  163. iframe-redirect-blocked-by-child-src-expected.txt
  164. iframe-redirect-blocked-by-child-src.html
  165. iframe-redirect-blocked-by-frame-src-expected.txt
  166. iframe-redirect-blocked-by-frame-src.html
  167. iframe-srcdoc-external-script-expected.txt
  168. iframe-srcdoc-external-script.html
  169. image-allowed-expected.txt
  170. image-allowed.html
  171. image-blocked-alt-text-expected.html
  172. image-blocked-alt-text.html
  173. image-blocked-expected.txt
  174. image-blocked-in-about-blank-window-expected.txt
  175. image-blocked-in-about-blank-window.html
  176. image-blocked.html
  177. image-data-URL-blocked-alt-text-expected.html
  178. image-data-URL-blocked-alt-text.html
  179. image-document-default-src-none-expected.txt
  180. image-document-default-src-none.html
  181. image-full-host-wildcard-allowed-expected.txt
  182. image-full-host-wildcard-allowed.html
  183. image-host-wildcard-allowed-expected.txt
  184. image-host-wildcard-allowed.html
  185. image-redirect-allowed-expected.txt
  186. image-redirect-allowed.html
  187. image-redirect-allowed2-expected.txt
  188. image-redirect-allowed2.html
  189. image-redirect-blocked-expected.txt
  190. image-redirect-blocked.html
  191. image-with-http-url-allowed-by-csp-img-src-star-expected.txt
  192. image-with-http-url-allowed-by-csp-img-src-star.html
  193. image-with-https-url-allowed-by-csp-img-src-star-expected.txt
  194. image-with-https-url-allowed-by-csp-img-src-star.html
  195. img-blocked-no-gc-crash-expected.txt
  196. img-blocked-no-gc-crash.html
  197. injected-inline-script-allowed-expected.txt
  198. injected-inline-script-allowed.html
  199. injected-inline-script-blocked-expected.txt
  200. injected-inline-script-blocked.html
  201. injected-inline-style-allowed-expected.txt
  202. injected-inline-style-allowed.html
  203. injected-inline-style-blocked-expected.txt
  204. injected-inline-style-blocked.html
  205. inline-event-handler-blocked-after-injecting-meta-expected.txt
  206. inline-event-handler-blocked-after-injecting-meta.html
  207. inline-script-allowed-expected.txt
  208. inline-script-allowed.html
  209. inline-script-blocked-expected.txt
  210. inline-script-blocked-goofy-expected.txt
  211. inline-script-blocked-goofy.html
  212. inline-script-blocked-javascript-url-expected.txt
  213. inline-script-blocked-javascript-url.html
  214. inline-script-blocked.html
  215. inline-style-allowed-expected.txt
  216. inline-style-allowed-while-cloning-objects-expected.txt
  217. inline-style-allowed-while-cloning-objects.html
  218. inline-style-allowed.html
  219. inline-style-attribute-allowed-expected.txt
  220. inline-style-attribute-allowed.html
  221. inline-style-attribute-blocked-expected.txt
  222. inline-style-attribute-blocked.html
  223. inline-style-attribute-on-html-expected.txt
  224. inline-style-attribute-on-html.html
  225. inline-style-blocked-expected.txt
  226. inline-style-blocked.html
  227. javascript-url-allowed-expected.txt
  228. javascript-url-allowed.html
  229. javascript-url-blocked-by-default-src-star-expected.txt
  230. javascript-url-blocked-by-default-src-star.html
  231. javascript-url-blocked-expected.txt
  232. javascript-url-blocked.html
  233. link-with-http-url-allowed-by-csp-style-src-star-expected.txt
  234. link-with-http-url-allowed-by-csp-style-src-star.html
  235. link-with-https-url-allowed-by-csp-style-src-star-expected.txt
  236. link-with-https-url-allowed-by-csp-style-src-star.html
  237. manifest-src-allowed-expected.txt
  238. manifest-src-allowed.html
  239. manifest-src-blocked-expected.txt
  240. manifest-src-blocked.html
  241. media-src-allowed-expected.txt
  242. media-src-allowed.html
  243. media-src-blocked-expected.txt
  244. media-src-blocked.html
  245. media-src-track-block-expected.txt
  246. media-src-track-block.html
  247. meta-tag-ignored-if-not-in-head-expected.txt
  248. meta-tag-ignored-if-not-in-head.html
  249. meta-tag-ignored-if-not-in-head2-expected.txt
  250. meta-tag-ignored-if-not-in-head2.html
  251. module-eval-blocked-expected.txt
  252. module-eval-blocked-in-external-script-expected.txt
  253. module-eval-blocked-in-external-script.html
  254. module-eval-blocked.html
  255. navigate-self-to-blob-expected.txt
  256. navigate-self-to-blob.html
  257. navigate-self-to-data-url-expected.txt
  258. navigate-self-to-data-url.html
  259. no-policy-expected.txt
  260. no-policy.html
  261. object-in-svg-foreignobject-expected.txt
  262. object-in-svg-foreignobject.html
  263. object-redirect-allowed-expected.txt
  264. object-redirect-allowed.html
  265. object-redirect-allowed2-expected.txt
  266. object-redirect-allowed2.html
  267. object-redirect-blocked-expected.txt
  268. object-redirect-blocked.html
  269. object-redirect-blocked2-expected.txt
  270. object-redirect-blocked2.html
  271. object-redirect-blocked3-expected.txt
  272. object-redirect-blocked3.html
  273. object-src-allows-embed-blocked-by-child-src-expected.txt
  274. object-src-allows-embed-blocked-by-child-src.html
  275. object-src-allows-embed-blocked-by-frame-src-expected.txt
  276. object-src-allows-embed-blocked-by-frame-src.html
  277. object-src-allows-object-blocked-by-child-src-expected.txt
  278. object-src-allows-object-blocked-by-child-src.html
  279. object-src-allows-object-blocked-by-frame-src-expected.txt
  280. object-src-allows-object-blocked-by-frame-src.html
  281. object-src-applet-archive-codebase-expected.txt
  282. object-src-applet-archive-codebase.html
  283. object-src-applet-archive-expected.txt
  284. object-src-applet-archive.html
  285. object-src-applet-code-codebase-expected.txt
  286. object-src-applet-code-codebase.html
  287. object-src-applet-code-expected.txt
  288. object-src-applet-code.html
  289. object-src-blocks-embed-allowed-by-child-src-expected.txt
  290. object-src-blocks-embed-allowed-by-child-src.html
  291. object-src-blocks-embed-allowed-by-frame-src-expected.txt
  292. object-src-blocks-embed-allowed-by-frame-src.html
  293. object-src-blocks-object-allowed-by-child-src-expected.txt
  294. object-src-blocks-object-allowed-by-child-src.html
  295. object-src-blocks-object-allowed-by-frame-src-expected.txt
  296. object-src-blocks-object-allowed-by-frame-src.html
  297. object-src-does-not-affect-child-expected.txt
  298. object-src-does-not-affect-child.html
  299. object-src-no-url-allowed-expected.txt
  300. object-src-no-url-allowed.html
  301. object-src-no-url-blocked-expected.txt
  302. object-src-no-url-blocked.html
  303. object-src-none-allowed-expected.txt
  304. object-src-none-allowed.html
  305. object-src-none-blocked-expected.txt
  306. object-src-none-blocked.html
  307. object-src-param-code-blocked-expected.txt
  308. object-src-param-code-blocked.html
  309. object-src-param-movie-blocked-expected.txt
  310. object-src-param-movie-blocked.html
  311. object-src-param-src-blocked-expected.txt
  312. object-src-param-src-blocked.html
  313. object-src-param-src-blocked2-expected.txt
  314. object-src-param-src-blocked2.html
  315. object-src-param-url-blocked-expected.txt
  316. object-src-param-url-blocked.html
  317. object-src-url-allowed-expected.txt
  318. object-src-url-allowed.html
  319. object-src-url-blocked-expected.txt
  320. object-src-url-blocked.html
  321. object-src-url-blocked2-expected.txt
  322. object-src-url-blocked2.html
  323. object-with-no-url-allowed-by-default-src-star-expected.txt
  324. object-with-no-url-allowed-by-default-src-star.html
  325. object-with-no-url-allowed-by-star-expected.txt
  326. object-with-no-url-allowed-by-star.html
  327. plugin-blocked-in-about-blank-window-expected.txt
  328. plugin-blocked-in-about-blank-window.html
  329. plugin-in-iframe-with-csp-expected.txt
  330. plugin-in-iframe-with-csp.html
  331. policy-does-not-affect-child-expected.txt
  332. policy-does-not-affect-child.html
  333. redirect-does-not-match-paths-expected.txt
  334. redirect-does-not-match-paths.html
  335. register-bypassing-scheme-expected.txt
  336. register-bypassing-scheme-partial-expected.txt
  337. register-bypassing-scheme-partial.html
  338. register-bypassing-scheme.html
  339. report-and-enforce-expected.txt
  340. report-and-enforce.php
  341. report-blocked-data-uri-expected.txt
  342. report-blocked-data-uri.php
  343. report-blocked-file-uri-expected.txt
  344. report-blocked-file-uri.php
  345. report-blocked-uri-and-do-not-follow-redirect-when-sending-report-expected.txt
  346. report-blocked-uri-and-do-not-follow-redirect-when-sending-report.php
  347. report-blocked-uri-cross-origin-expected.txt
  348. report-blocked-uri-cross-origin.php
  349. report-blocked-uri-expected.txt
  350. report-blocked-uri.php
  351. report-cross-origin-no-cookies-expected.txt
  352. report-cross-origin-no-cookies-when-private-browsing-enabled-expected.txt
  353. report-cross-origin-no-cookies-when-private-browsing-enabled.php
  354. report-cross-origin-no-cookies-when-private-browsing-toggled-expected.txt
  355. report-cross-origin-no-cookies-when-private-browsing-toggled.php
  356. report-cross-origin-no-cookies.php
  357. report-multiple-violations-01-expected.txt
  358. report-multiple-violations-01.php
  359. report-multiple-violations-02-expected.txt
  360. report-multiple-violations-02.php
  361. report-only-connect-src-beacon-redirect-blocked-expected.txt
  362. report-only-connect-src-beacon-redirect-blocked.php
  363. report-only-connect-src-xmlhttprequest-redirect-to-blocked-expected.txt
  364. report-only-connect-src-xmlhttprequest-redirect-to-blocked.php
  365. report-only-expected.txt
  366. report-only-from-header-expected.txt
  367. report-only-from-header.php
  368. report-only-meta-tag-ignored-if-not-in-head-expected.txt
  369. report-only-meta-tag-ignored-if-not-in-head.html
  370. report-only-meta-tag-ignored-if-not-in-head2-expected.txt
  371. report-only-meta-tag-ignored-if-not-in-head2.html
  372. report-only-report-uri-missing-expected.txt
  373. report-only-report-uri-missing.php
  374. report-only-upgrade-insecure-expected.txt
  375. report-only-upgrade-insecure.php
  376. report-only.php
  377. report-same-origin-no-cookies-when-private-browsing-toggled-expected.txt
  378. report-same-origin-no-cookies-when-private-browsing-toggled.php
  379. report-same-origin-with-cookies-expected.txt
  380. report-same-origin-with-cookies-when-private-browsing-enabled-expected.txt
  381. report-same-origin-with-cookies-when-private-browsing-enabled.php
  382. report-same-origin-with-cookies.php
  383. report-status-code-zero-when-using-https-expected.txt
  384. report-status-code-zero-when-using-https.html
  385. report-uri-expected.txt
  386. report-uri-from-child-frame-expected.txt
  387. report-uri-from-child-frame.html
  388. report-uri-from-inline-javascript-expected.txt
  389. report-uri-from-inline-javascript.php
  390. report-uri-from-javascript-expected.txt
  391. report-uri-from-javascript.php
  392. report-uri-in-meta-tag-ignored-expected.txt
  393. report-uri-in-meta-tag-ignored.html
  394. report-uri-scheme-relative-expected.txt
  395. report-uri-scheme-relative.php
  396. report-uri.php
  397. same-origin-plugin-document-allowed-in-child-window-expected.txt
  398. same-origin-plugin-document-allowed-in-child-window.html
  399. same-origin-plugin-document-blocked-in-child-window-expected.txt
  400. same-origin-plugin-document-blocked-in-child-window-report-expected.txt
  401. same-origin-plugin-document-blocked-in-child-window-report.php
  402. same-origin-plugin-document-blocked-in-child-window.html
  403. same-origin-plugin-document-with-csp-blocked-in-child-window-expected.txt
  404. same-origin-plugin-document-with-csp-blocked-in-child-window.html
  405. sandbox-allow-scripts-in-http-header-control-expected.txt
  406. sandbox-allow-scripts-in-http-header-control.html
  407. sandbox-allow-scripts-in-http-header-expected.txt
  408. sandbox-allow-scripts-in-http-header.html
  409. sandbox-allow-scripts-in-http-header2-expected.txt
  410. sandbox-allow-scripts-in-http-header2.php
  411. sandbox-empty-in-http-header-expected.txt
  412. sandbox-empty-in-http-header-inherited-by-subframe-expected.txt
  413. sandbox-empty-in-http-header-inherited-by-subframe.php
  414. sandbox-empty-in-http-header.php
  415. sandbox-in-http-header-control-expected.txt
  416. sandbox-in-http-header-control.html
  417. sandbox-in-http-header-expected.txt
  418. sandbox-in-http-header.html
  419. sandbox-in-meta-tag-ignored-expected.txt
  420. sandbox-in-meta-tag-ignored.html
  421. sandbox-invalid-header-expected.txt
  422. sandbox-invalid-header.html
  423. sandbox-report-only-expected.txt
  424. sandbox-report-only.html
  425. script-loads-with-img-src-expected.txt
  426. script-loads-with-img-src.html
  427. script-redirect-allowed-expected.txt
  428. script-redirect-allowed.html
  429. script-redirect-allowed2-expected.txt
  430. script-redirect-allowed2.html
  431. script-redirect-blocked-expected.txt
  432. script-redirect-blocked.html
  433. script-src-appended-script-expected.txt
  434. script-src-appended-script.html
  435. script-src-blocked-error-event-expected.txt
  436. script-src-blocked-error-event.html
  437. script-src-in-iframe-expected.txt
  438. script-src-in-iframe.html
  439. script-src-none-expected.txt
  440. script-src-none-inline-event-expected.txt
  441. script-src-none-inline-event.html
  442. script-src-none.html
  443. script-src-overrides-default-src-expected.txt
  444. script-src-overrides-default-src.html
  445. script-src-parsing-implicit-and-explicit-port-number-expected.txt
  446. script-src-parsing-implicit-and-explicit-port-number.html
  447. script-src-redirect-expected.txt
  448. script-src-redirect.html
  449. script-src-self-blocked-01-expected.txt
  450. script-src-self-blocked-01.html
  451. script-src-self-blocked-02-expected.txt
  452. script-src-self-blocked-02.html
  453. script-src-self-blocked-03-expected.txt
  454. script-src-self-blocked-03.html
  455. script-src-self-expected.txt
  456. script-src-self.html
  457. script-src-star-cross-scheme-expected.txt
  458. script-src-star-cross-scheme.html
  459. source-list-parsing-01-expected.txt
  460. source-list-parsing-01.html
  461. source-list-parsing-02-expected.txt
  462. source-list-parsing-02.html
  463. source-list-parsing-03-expected.txt
  464. source-list-parsing-03.html
  465. source-list-parsing-04-expected.txt
  466. source-list-parsing-04.html
  467. source-list-parsing-05-expected.txt
  468. source-list-parsing-05.html
  469. source-list-parsing-06-expected.txt
  470. source-list-parsing-06.html
  471. source-list-parsing-07-expected.txt
  472. source-list-parsing-07.html
  473. source-list-parsing-08-expected.txt
  474. source-list-parsing-08.html
  475. source-list-parsing-09-expected.txt
  476. source-list-parsing-09.html
  477. source-list-parsing-10-expected.txt
  478. source-list-parsing-10.html
  479. source-list-parsing-deprecated-expected.txt
  480. source-list-parsing-deprecated.html
  481. source-list-parsing-malformed-meta-expected.txt
  482. source-list-parsing-malformed-meta.html
  483. source-list-parsing-no-semicolon-expected.txt
  484. source-list-parsing-no-semicolon.html
  485. source-list-parsing-nonascii-expected.txt
  486. source-list-parsing-nonascii.html
  487. source-list-parsing-none-expected.txt
  488. source-list-parsing-none.html
  489. source-list-parsing-paths-01-expected.txt
  490. source-list-parsing-paths-01.html
  491. source-list-parsing-paths-02-expected.txt
  492. source-list-parsing-paths-02.html
  493. source-list-parsing-paths-03-expected.txt
  494. source-list-parsing-paths-03.html
  495. srcdoc-doesnt-bypass-script-src-expected.txt
  496. srcdoc-doesnt-bypass-script-src.html
  497. style-allowed-expected.txt
  498. style-allowed.html
  499. style-blocked-expected.txt
  500. style-blocked.html
  501. style-src-blocked-error-event-expected.txt
  502. style-src-blocked-error-event.html
  503. stylesheet-redirect-allowed-expected.txt
  504. stylesheet-redirect-allowed.html
  505. stylesheet-redirect-allowed2-expected.txt
  506. stylesheet-redirect-allowed2.html
  507. stylesheet-redirect-blocked-expected.txt
  508. stylesheet-redirect-blocked.html
  509. subframe-with-data-url-inheritance-expected.txt
  510. subframe-with-data-url-inheritance.html
  511. svg-font-redirect-allowed-expected.txt
  512. svg-font-redirect-allowed.html
  513. svg-font-redirect-allowed2-expected.txt
  514. svg-font-redirect-allowed2.html
  515. svg-font-redirect-blocked-expected.txt
  516. svg-font-redirect-blocked.html
  517. svg-image-redirect-allowed-expected.txt
  518. svg-image-redirect-allowed.html
  519. svg-image-redirect-allowed2-expected.txt
  520. svg-image-redirect-allowed2.html
  521. svg-image-redirect-blocked-expected.txt
  522. svg-image-redirect-blocked.html
  523. track-redirect-allowed-expected.txt
  524. track-redirect-allowed.html
  525. track-redirect-allowed2-expected.txt
  526. track-redirect-allowed2.html
  527. track-redirect-blocked-expected.txt
  528. track-redirect-blocked.html
  529. user-style-sheet-font-crasher-expected.txt
  530. user-style-sheet-font-crasher.php
  531. video-redirect-allowed-expected.txt
  532. video-redirect-allowed.html
  533. video-redirect-allowed2-expected.txt
  534. video-redirect-allowed2.html
  535. video-redirect-blocked-expected.txt
  536. video-redirect-blocked.html
  537. video-with-http-url-allowed-by-csp-media-src-star-expected.txt
  538. video-with-http-url-allowed-by-csp-media-src-star.html
  539. video-with-https-url-allowed-by-csp-media-src-star-expected.txt
  540. video-with-https-url-allowed-by-csp-media-src-star.html
  541. WebAssembly-allowed-expected.txt
  542. WebAssembly-allowed.html
  543. WebAssembly-blocked-expected.txt
  544. WebAssembly-blocked-in-about-blank-iframe-expected.txt
  545. WebAssembly-blocked-in-about-blank-iframe.html
  546. WebAssembly-blocked-in-external-script-expected.txt
  547. WebAssembly-blocked-in-external-script.html
  548. WebAssembly-blocked-in-subframe-expected.txt
  549. WebAssembly-blocked-in-subframe.html
  550. WebAssembly-blocked.html
  551. window-open-javascript-url-blocked-expected.txt
  552. window-open-javascript-url-blocked.html
  553. window-open-javascript-url-with-target-blocked-expected.txt
  554. window-open-javascript-url-with-target-blocked.html
  555. worker-blob-inherits-csp-blocks-eval-expected.txt
  556. worker-blob-inherits-csp-blocks-eval.html
  557. worker-blob-inherits-csp-expected.txt
  558. worker-blob-inherits-csp-importScripts-block-aborts-all-subsequent-imports-expected.txt
  559. worker-blob-inherits-csp-importScripts-block-aborts-all-subsequent-imports.html
  560. worker-blob-inherits-csp-importScripts-redirect-cross-origin-blocked-expected.txt
  561. worker-blob-inherits-csp-importScripts-redirect-cross-origin-blocked.html
  562. worker-blob-inherits-csp.html
  563. worker-blob-location-expected.txt
  564. worker-blob-location.html
  565. worker-connect-src-allowed-expected.txt
  566. worker-connect-src-allowed.html
  567. worker-connect-src-blocked-expected.txt
  568. worker-connect-src-blocked.html
  569. worker-csp-blocks-xhr-redirect-cross-origin-expected.txt
  570. worker-csp-blocks-xhr-redirect-cross-origin.html
  571. worker-csp-importScripts-redirect-cross-origin-allowed-expected.txt
  572. worker-csp-importScripts-redirect-cross-origin-allowed.html
  573. worker-csp-importScripts-redirect-cross-origin-blocked-expected.txt
  574. worker-csp-importScripts-redirect-cross-origin-blocked.html
  575. worker-eval-blocked-expected.txt
  576. worker-eval-blocked.html
  577. worker-function-function-blocked-expected.txt
  578. worker-function-function-blocked.html
  579. worker-importscripts-blocked-expected.txt
  580. worker-importscripts-blocked.html
  581. worker-multiple-csp-headers-expected.txt
  582. worker-multiple-csp-headers.html
  583. worker-redirect-allowed-expected.txt
  584. worker-redirect-allowed.html
  585. worker-script-src-expected.txt
  586. worker-script-src.html
  587. worker-set-timeout-blocked-expected.txt
  588. worker-set-timeout-blocked.html
  589. worker-without-csp-importScripts-redirect-cross-origin-allowed-expected.txt
  590. worker-without-csp-importScripts-redirect-cross-origin-allowed.html
  591. worker-without-own-csp-expected.txt
  592. worker-without-own-csp.html
  593. xmlhttprequest-protected-resource-does-not-crash-expected.txt
  594. xmlhttprequest-protected-resource-does-not-crash.html
  595. xsl-allowed-expected.txt
  596. xsl-allowed.php
  597. xsl-blocked-expected.txt
  598. xsl-blocked.php
  599. xsl-img-blocked-expected.txt
  600. xsl-img-blocked.php
  601. xsl-redirect-allowed-expected.txt
  602. xsl-redirect-allowed.html
  603. xsl-redirect-allowed2-expected.txt
  604. xsl-redirect-allowed2.html
  605. xsl-redirect-blocked-expected.txt
  606. xsl-redirect-blocked.html
  607. xsl-unaffected-by-style-src-1-expected.png
  608. xsl-unaffected-by-style-src-1-expected.txt
  609. xsl-unaffected-by-style-src-1.php
  610. xsl-unaffected-by-style-src-2-expected.txt
  611. xsl-unaffected-by-style-src-2.php