src/third_party/web_platform_tests/content-security-policy/blink-contrib/connect-src-xmlhttprequest-blocked.sub.html - cobalt - Git at Google

 <!DOCTYPE html>
 <html>

 <head>
     <!-- Programmatically converted from a WebKit Reftest, please forgive resulting idiosyncracies.-->
     <title>connect-src-xmlhttprequest-blocked</title>
     <script src="/resources/testharness.js"></script>
     <script src="/resources/testharnessreport.js"></script>
     <script src='../support/logTest.sub.js?logs=["Pass"]'></script>
     <script src="../support/alertAssert.sub.js?alerts=[]"></script>
     <!-- enforcing policy:
 connect-src 'self'; script-src 'self' 'unsafe-inline';
 -->
 </head>

 <body>
     <script>
         try {
             var xhr = new XMLHttpRequest;
             xhr.open("GET", "http://www1.{{host}}:{{ports[http][0]}}/content-security-policy/support/fail.png", true);
             xhr.send();
             xhr.onload = function() {
                 log("Fail");
             }
             xhr.onerror = function() {
                 log("Pass");
             }
         } catch (e) {
             log("Pass");
         }

     </script>
     <div id="log"></div>
     <script async defer src="../support/checkReport.sub.js?reportExists=true&amp;reportField=violated-directive&amp;reportValue=connect-src%20&apos;self&apos;"></script>
 </body>

 </html>
	<!DOCTYPE html>
	<html>

	<head>
	<!-- Programmatically converted from a WebKit Reftest, please forgive resulting idiosyncracies.-->
	<title>connect-src-xmlhttprequest-blocked</title>
	<script src="/resources/testharness.js"></script>
	<script src="/resources/testharnessreport.js"></script>
	<script src='../support/logTest.sub.js?logs=["Pass"]'></script>
	<script src="../support/alertAssert.sub.js?alerts=[]"></script>
	<!-- enforcing policy:
	connect-src 'self'; script-src 'self' 'unsafe-inline';
	-->
	</head>

	<body>
	<script>
	try {
	var xhr = new XMLHttpRequest;
	xhr.open("GET", "http://www1.{{host}}:{{ports[http][0]}}/content-security-policy/support/fail.png", true);
	xhr.send();
	xhr.onload = function() {
	log("Fail");
	}
	xhr.onerror = function() {
	log("Pass");
	}
	} catch (e) {
	log("Pass");
	}

	</script>
	<div id="log"></div>
	<script async defer src="../support/checkReport.sub.js?reportExists=true&reportField=violated-directive&reportValue=connect-src%20'self'"></script>
	</body>

	</html>