| <!DOCTYPE html> |
| <html> |
| <head> |
| <meta http-equiv="Content-Security-Policy" content="base-uri 'self'"> |
| <script src="http://localhost:8000/js-test-resources/js-test.js"></script> |
| <script src="http://localhost:8000/security/contentSecurityPolicy/resources/securitypolicyviolation-test.js"></script> |
| <script> |
| description('Check that base URIs cannot be set if they violate the page\'s policy.'); |
| |
| var expectations = { |
| 'documentURI': document.location.toString(), |
| 'referrer': document.referrer, |
| 'blockedURI': 'http://example.com/base', |
| 'violatedDirective': 'base-uri \'self\'', |
| 'effectiveDirective': 'base-uri', |
| 'originalPolicy': 'base-uri \'self\'', |
| 'sourceFile': document.location.toString(), |
| 'lineNumber': 24 |
| }; |
| |
| function run() { |
| var base = document.createElement('base'); |
| base.href = 'http://example.com/base'; |
| document.head.appendChild(base); |
| |
| shouldBe('document.baseURI', 'document.location.href'); |
| } |
| </script> |
| </head> |
| <body> |
| </body> |
| </html> |
