Google Git
Sign in
cobalt / cobalt / a7b1cfadc52288d71702934fd93743a24aea060a / . / src / third_party / web_platform_tests / content-security-policy / blink-contrib
tree: a305ac256589abe2ee5f9265aed519eb2545f214 [path history] [tgz]
  1. resources/
  2. blob-urls-do-not-match-self.sub.html
  3. blob-urls-do-not-match-self.sub.html.sub.headers
  4. blob-urls-match-blob.sub.html
  5. blob-urls-match-blob.sub.html.sub.headers
  6. combine-header-and-meta-policies.sub.html
  7. combine-header-and-meta-policies.sub.html.sub.headers
  8. combine-multiple-header-policies.html.asis
  9. connect-src-beacon-allowed.sub.html
  10. connect-src-beacon-allowed.sub.html.sub.headers
  11. connect-src-beacon-blocked.sub.html
  12. connect-src-beacon-blocked.sub.html.sub.headers
  13. connect-src-beacon-redirect-to-blocked.sub.html
  14. connect-src-beacon-redirect-to-blocked.sub.html.sub.headers
  15. connect-src-eventsource-allowed.sub.html
  16. connect-src-eventsource-allowed.sub.html.sub.headers
  17. connect-src-eventsource-blocked.sub.html
  18. connect-src-eventsource-blocked.sub.html.sub.headers
  19. connect-src-eventsource-redirect-to-blocked.sub.html
  20. connect-src-eventsource-redirect-to-blocked.sub.html.sub.headers
  21. connect-src-websocket-allowed.sub.html
  22. connect-src-websocket-allowed.sub.html.sub.headers
  23. connect-src-websocket-blocked.sub.html
  24. connect-src-websocket-blocked.sub.html.sub.headers
  25. connect-src-xmlhttprequest-allowed.sub.html
  26. connect-src-xmlhttprequest-allowed.sub.html.sub.headers
  27. connect-src-xmlhttprequest-blocked.sub.html
  28. connect-src-xmlhttprequest-blocked.sub.html.sub.headers
  29. connect-src-xmlhttprequest-redirect-to-blocked.sub.html
  30. connect-src-xmlhttprequest-redirect-to-blocked.sub.html.sub.headers
  31. default-src-inline-allowed.sub.html
  32. default-src-inline-allowed.sub.html.sub.headers
  33. default-src-inline-blocked.sub.html
  34. default-src-inline-blocked.sub.html.sub.headers
  35. duplicate-directive.sub.html
  36. duplicate-directive.sub.html.sub.headers
  37. eval-allowed.sub.html
  38. eval-allowed.sub.html.sub.headers
  39. eval-blocked-and-sends-report.sub.html
  40. eval-blocked-and-sends-report.sub.html.sub.headers
  41. eval-blocked-in-about-blank-iframe.sub.html
  42. eval-blocked-in-about-blank-iframe.sub.html.sub.headers
  43. eval-blocked.sub.html
  44. eval-blocked.sub.html.sub.headers
  45. eval-scripts-setInterval-allowed.sub.html
  46. eval-scripts-setInterval-allowed.sub.html.sub.headers
  47. eval-scripts-setInterval-blocked.sub.html
  48. eval-scripts-setInterval-blocked.sub.html.sub.headers
  49. eval-scripts-setTimeout-allowed.sub.html
  50. eval-scripts-setTimeout-allowed.sub.html.sub.headers
  51. eval-scripts-setTimeout-blocked.sub.html
  52. eval-scripts-setTimeout-blocked.sub.html.sub.headers
  53. filesystem-urls-do-not-match-self.sub.html
  54. filesystem-urls-do-not-match-self.sub.html.sub.headers
  55. filesystem-urls-match-filesystem.sub.html
  56. filesystem-urls-match-filesystem.sub.html.sub.headers
  57. frame-src-about-blank-allowed-by-default.sub.html
  58. frame-src-about-blank-allowed-by-default.sub.html.sub.headers
  59. frame-src-about-blank-allowed-by-scheme.sub.html
  60. frame-src-about-blank-allowed-by-scheme.sub.html.sub.headers
  61. frame-src-allowed.sub.html
  62. frame-src-allowed.sub.html.sub.headers
  63. frame-src-blocked.sub.html
  64. frame-src-blocked.sub.html.sub.headers
  65. frame-src-cross-origin-load.sub.html
  66. frame-src-cross-origin-load.sub.html.sub.headers
  67. function-constructor-allowed.sub.html
  68. function-constructor-allowed.sub.html.sub.headers
  69. function-constructor-blocked.sub.html
  70. function-constructor-blocked.sub.html.sub.headers
  71. icon-allowed.sub.html
  72. icon-allowed.sub.html.sub.headers
  73. icon-blocked.sub.html
  74. icon-blocked.sub.html.sub.headers
  75. iframe-inside-csp.sub.html
  76. iframe-inside-csp.sub.html.sub.headers
  77. image-allowed.sub.html
  78. image-allowed.sub.html.sub.headers
  79. image-blocked.sub.html
  80. image-blocked.sub.html.sub.headers
  81. image-full-host-wildcard-allowed.sub.html
  82. image-full-host-wildcard-allowed.sub.html.sub.headers
  83. injected-inline-script-allowed.sub.html
  84. injected-inline-script-allowed.sub.html.sub.headers
  85. injected-inline-script-blocked.sub.html
  86. injected-inline-script-blocked.sub.html.sub.headers
  87. injected-inline-style-allowed.sub.html
  88. injected-inline-style-allowed.sub.html.sub.headers
  89. injected-inline-style-blocked.sub.html
  90. injected-inline-style-blocked.sub.html.sub.headers
  91. inline-style-allowed-while-cloning-objects.sub.html
  92. inline-style-allowed-while-cloning-objects.sub.html.sub.headers
  93. inline-style-allowed.sub.html
  94. inline-style-allowed.sub.html.sub.headers
  95. inline-style-attribute-allowed.sub.html
  96. inline-style-attribute-allowed.sub.html.sub.headers
  97. inline-style-attribute-blocked.sub.html
  98. inline-style-attribute-blocked.sub.html.sub.headers
  99. inline-style-attribute-on-html.sub.html
  100. inline-style-attribute-on-html.sub.html.sub.headers
  101. inline-style-blocked.sub.html
  102. inline-style-blocked.sub.html.sub.headers
  103. manifest-src-allowed.sub.html
  104. manifest-src-allowed.sub.html.sub.headers
  105. manifest-src-blocked.sub.html
  106. manifest-src-blocked.sub.html.sub.headers
  107. media-src-allowed.sub.html
  108. media-src-allowed.sub.html.sub.headers
  109. media-src-blocked.sub.html
  110. media-src-blocked.sub.html.sub.headers
  111. media-src-track-block.sub.html
  112. media-src-track-block.sub.html.sub.headers
  113. object-in-svg-foreignobject.sub.html
  114. object-in-svg-foreignobject.sub.html.sub.headers
  115. object-src-applet-archive-codebase.sub.html
  116. object-src-applet-archive-codebase.sub.html.sub.headers
  117. object-src-applet-archive.sub.html
  118. object-src-applet-archive.sub.html.sub.headers
  119. object-src-applet-code-codebase.sub.html
  120. object-src-applet-code-codebase.sub.html.sub.headers
  121. object-src-applet-code.sub.html
  122. object-src-applet-code.sub.html.sub.headers
  123. object-src-no-url-allowed.sub.html
  124. object-src-no-url-allowed.sub.html.sub.headers
  125. object-src-no-url-blocked.sub.html
  126. object-src-no-url-blocked.sub.html.sub.headers
  127. object-src-url-allowed.sub.html
  128. object-src-url-allowed.sub.html.sub.headers
  129. object-src-url-blocked.sub.html
  130. object-src-url-blocked.sub.html.sub.headers
  131. policy-does-not-affect-child.sub.html
  132. policy-does-not-affect-child.sub.html.sub.headers
  133. report-blocked-data-uri.sub.html
  134. report-blocked-data-uri.sub.html.sub.headers
  135. report-cross-origin-no-cookies.sub.html
  136. report-cross-origin-no-cookies.sub.html.sub.headers
  137. report-disallowed-from-meta.sub.html
  138. report-disallowed-from-meta.sub.html.sub.headers
  139. report-same-origin-with-cookies.sub.html
  140. report-same-origin-with-cookies.sub.html.sub.headers
  141. report-uri-from-inline-javascript.sub.html
  142. report-uri-from-inline-javascript.sub.html.sub.headers
  143. report-uri-from-javascript.sub.html
  144. report-uri-from-javascript.sub.html.sub.headers
  145. report-uri.sub.html
  146. report-uri.sub.html.sub.headers
  147. sandbox-allow-scripts-subframe.sub.html
  148. sandbox-allow-scripts-subframe.sub.html.sub.headers
  149. sandbox-allow-scripts.sub.html
  150. sandbox-allow-scripts.sub.html.sub.headers
  151. sandbox-empty-subframe.sub.html
  152. sandbox-empty-subframe.sub.html.sub.headers
  153. sandbox-empty.sub.html
  154. sandbox-empty.sub.html.sub.headers
  155. script-src-overrides-default-src.sub.html
  156. script-src-overrides-default-src.sub.html.sub.headers
  157. self-doesnt-match-blob.sub.html
  158. self-doesnt-match-blob.sub.html.sub.headers
  159. shared-worker-connect-src-allowed.sub.html
  160. shared-worker-connect-src-allowed.sub.html.sub.headers
  161. shared-worker-connect-src-blocked.sub.html
  162. shared-worker-connect-src-blocked.sub.html.sub.headers
  163. source-list-parsing-paths-03.sub.html
  164. source-list-parsing-paths-03.sub.html.sub.headers
  165. srcdoc-doesnt-bypass-script-src.sub.html
  166. srcdoc-doesnt-bypass-script-src.sub.html.sub.headers
  167. star-doesnt-match-blob.sub.html
  168. star-doesnt-match-blob.sub.html.sub.headers
  169. style-allowed.sub.html
  170. style-allowed.sub.html.sub.headers
  171. style-blocked.sub.html
  172. style-blocked.sub.html.sub.headers
  173. worker-connect-src-allowed.sub.html
  174. worker-connect-src-allowed.sub.html.sub.headers
  175. worker-connect-src-blocked.sub.html
  176. worker-connect-src-blocked.sub.html.sub.headers
  177. worker-eval-blocked.sub.html
  178. worker-eval-blocked.sub.html.sub.headers
  179. worker-from-guid.sub.html
  180. worker-from-guid.sub.html.sub.headers
  181. worker-function-function-blocked.sub.html
  182. worker-function-function-blocked.sub.html.sub.headers
  183. worker-importscripts-blocked.sub.html
  184. worker-importscripts-blocked.sub.html.sub.headers
  185. worker-script-src.sub.html
  186. worker-script-src.sub.html.sub.headers
  187. worker-set-timeout-blocked.sub.html
  188. worker-set-timeout-blocked.sub.html.sub.headers
  189. xsl-blocked-expected.png
  190. xsl-unaffected-by-style-src-1-expected.png