| frame "<!--frame1-->" - didStartProvisionalLoadForFrame |
| main frame - didFinishDocumentLoadForFrame |
| CONSOLE MESSAGE: The Content Security Policy 'block-all-mixed-content' was delivered in report-only mode, but does not specify a 'report-uri'; the policy will have no effect. Please either add a 'report-uri' directive, or deliver the policy via the 'Content-Security-Policy' header. |
| frame "<!--frame1-->" - didCommitLoadForFrame |
| CONSOLE MESSAGE: Blocked mixed content http://127.0.0.1:8000/security/resources/compass.jpg because 'block-all-mixed-content' appears in the Content Security Policy. |
| CONSOLE MESSAGE: [Report Only] Blocked mixed content http://127.0.0.1:8000/security/resources/compass.jpg because 'block-all-mixed-content' appears in the Content Security Policy. |
| frame "<!--frame1-->" - didFinishDocumentLoadForFrame |
| frame "<!--frame1-->" - didHandleOnloadEventsForFrame |
| main frame - didHandleOnloadEventsForFrame |
| frame "<!--frame1-->" - didFinishLoadForFrame |
| main frame - didFinishLoadForFrame |
| This test loads a secure iframe that loads an insecure image. We should trigger a mixed content block because the child frame has an CSP directive block-all-mixed-content in an enforced policy. |
| |
| |
| |
| -------- |
| Frame: '<!--frame1-->' |
| -------- |
| |
| documentURI: https://127.0.0.1:8443/security/contentSecurityPolicy/block-all-mixed-content/resources/frame-with-insecure-image-with-enforced-and-report-policies.py |
| referrer: http://127.0.0.1:8000/ |
| blockedURI: http://127.0.0.1:8000 |
| violatedDirective: block-all-mixed-content |
| effectiveDirective: block-all-mixed-content |
| originalPolicy: block-all-mixed-content |
| sourceFile: https://127.0.0.1:8443/security/contentSecurityPolicy/block-all-mixed-content/resources/frame-with-insecure-image-with-enforced-and-report-policies.py |
| lineNumber: 9 |
| columnNumber: 15 |
| statusCode: 0 |
| |
| |
