<!DOCTYPE html> | |
<html> | |
<head> | |
<meta http-equiv="Content-Security-Policy" content="block-all-mixed-content"> | |
<script src="dump-securitypolicyviolation-and-notify-done.js"></script> | |
</head> | |
<body> | |
<!-- FIXME: For some reason a SecurityPolicyViolation event is not dispatched (why?) when the child frame load is blocked. --> | |
<iframe src="http://127.0.0.1:8000/security/contentSecurityPolicy/block-all-mixed-content/resources/fail.html"></iframe> | |
</body> | |
</html> |