<!DOCTYPE html>
<html>
<head>
    <script src="/resources/testharness.js"></script>
    <script src="/resources/testharnessreport.js"></script>
    <meta http-equiv="Content-Security-Policy" content="child-src 'self'; connect-src 'none'">
</head>
<body>
    <script>
        var t = async_test("worker redirects to location disallowed by connect-src");
		var worker = new Worker("/security/resources/redir.php?url=" + encodeURIComponent("http://127.0.0.1:8000/security/contentSecurityPolicy/resources/worker-postmessage.js"));
        worker.addEventListener("message", function () {
            t.done();
        });
        worker.postMessage("go");
    </script>
</body>
</html>