blob: fe270624db0c0665b79d23117b16f45fd1e815c1 [file] [log] [blame]
<!DOCTYPE html>
<html>
<head>
<script src="/js-test-resources/js-test-pre.js"></script>
<script>
description('Check that a CSP header added by a 304 response does not override one from the original request.');
window.jsTestIsAsync = true;
var frame1, frame2;
function frameLoaded() {
frame1 = document.querySelector('iframe');
frame2 = document.createElement('iframe');
document.body.appendChild(frame2);
frame2.onload = checkState;
frame2.src = frame1.src;
}
function checkState() {
debug('Check that the nonce is the same, meaning that the document was only generated once:');
shouldBeTrue('frame1.contentDocument.querySelector("input").value == frame2.contentDocument.querySelector("input").value');
finishJSTest();
}
</script>
<script src="/js-test-resources/js-test-post.js"></script>
</head>
<body>
<iframe src="http://127.0.0.1:8000/security/contentSecurityPolicy/resources/nph-cached-csp.pl" onload="frameLoaded()"></iframe>
</body>
</html>