blob: 9b7dc32e1bd214edf8b06edf05d6c76e85009530 [file] [log] [blame]
<!DOCTYPE html>
<html>
<head>
<!-- Programmatically converted from a WebKit Reftest, please forgive resulting idiosyncracies.-->
<title>securitypolicyviolation-block-cross-origin-image</title>
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
<script src='../support/logTest.sub.js?logs=["TEST COMPLETE"]'></script>
<script src="../support/alertAssert.sub.js?alerts=[]"></script>
<!-- enforcing policy:
img-src 'none'; script-src 'self' 'unsafe-inline'; connect-src 'self';
-->
</head>
<body>
<script>
var img = document.createElement('img');
img.src = 'http://{{host}}:{{ports[http][0]}}/security/resources/abe.png';
document.body.appendChild(img);
log("TEST COMPLETE");
</script>
<p>Check that a SecurityPolicyViolationEvent strips detail from cross-origin blocked URLs.</p>
<div id="log"></div>
<script async defer src="../support/checkReport.sub.js?reportExists=true&amp;reportField=violated-directive&amp;reportValue=img-src%20&apos;none&apos;"></script>
</body>
</html>