<?php
    header("Content-Security-Policy: img-src 'none'; report-uri http://localhost:8080/security/contentSecurityPolicy/resources/save-report.php");
?>
<!DOCTYPE html>
<html>
<body>
<script>
if (window.testRunner) {
    testRunner.waitUntilDone();
    testRunner.dumpAsText();

    testRunner.setStatisticsShouldDowngradeReferrer(false, function () {
        var xhr = new XMLHttpRequest();
        xhr.open("GET", "http://localhost:8080/cookies/resources/setCookies.cgi", false);
        xhr.setRequestHeader("SET-COOKIE", "hello=world;path=/");
        xhr.send(null);

        // This image will generate a CSP violation report.
        let imgElement = document.createElement("img");
        imgElement.onload = imgElement.onerror = function () {
            window.location = "/security/contentSecurityPolicy/resources/echo-report.php";
        };
        imgElement.src = "/security/resources/abe.png";
        document.body.appendChild(imgElement);
    });
}
</script>
</body>
</html>