Sign in
chromium
/
chromium
/
src
/
e092dc1b1477a1192745054d5885eb50cdfd8b2f
/
.
/
third_party
/
blink
/
web_tests
/
http
/
tests
/
security
/
contentSecurityPolicy
tree: 92a07a9c3d38b72f94dc0268ecbcdcd732c13bbf [
path history
]
[
tgz
]
1.1/
cascade/
csp3-experimental/
manifest.test/
nonces/
require-sri-for/
resources/
securitypolicyviolation/
strict-dynamic/
blob-urls-match-self.html
block-mixed-content-hides-warning-expected.txt
block-mixed-content-hides-warning.html
cached-frame-csp-expected.txt
cached-frame-csp.html
combine-multiple-policies-expected.txt
combine-multiple-policies.html
connect-src-anchor-ping-expected.txt
connect-src-anchor-ping.html
connect-src-beacon-allowed-expected.txt
connect-src-beacon-allowed.html
connect-src-eventsource-allowed-expected.txt
connect-src-eventsource-allowed.html
connect-src-preload-allowed.html
connect-src-preload-blocked.html
connect-src-websocket-allowed-expected.txt
connect-src-websocket-allowed.html
connect-src-xmlhttprequest-allowed-expected.txt
connect-src-xmlhttprequest-allowed.html
csp-header-is-sent.html
default-src-inline-allowed-expected.txt
default-src-inline-allowed.html
default-src-inline-blocked-expected.txt
default-src-inline-blocked.html
directive-parsing-01-expected.txt
directive-parsing-01.html
directive-parsing-02-expected.txt
directive-parsing-02.html
directive-parsing-03-expected.txt
directive-parsing-03.html
directive-parsing-04-expected.txt
directive-parsing-04.html
directive-parsing-05-expected.txt
directive-parsing-05.html
directive-parsing-multiple-headers-expected.txt
directive-parsing-multiple-headers.html
duplicate-directive-expected.txt
duplicate-directive.html
embed-src-image-url-blocked-expected.txt
embed-src-image-url-blocked.html
eval-allowed-expected.txt
eval-allowed.html
eval-blocked-and-sends-report-expected.txt
eval-blocked-and-sends-report.php
eval-blocked-expected.txt
eval-blocked-in-about-blank-iframe-expected.txt
eval-blocked-in-about-blank-iframe.html
eval-blocked.html
eval-scripts-setInterval-allowed-expected.txt
eval-scripts-setInterval-allowed.html
eval-scripts-setInterval-blocked-expected.txt
eval-scripts-setInterval-blocked.html
eval-scripts-setTimeout-allowed-expected.txt
eval-scripts-setTimeout-allowed.html
eval-scripts-setTimeout-blocked-expected.txt
eval-scripts-setTimeout-blocked.html
filesystem-urls-match-self.html
frame-src-about-blank-allowed-by-default-expected.txt
frame-src-about-blank-allowed-by-default.html
frame-src-about-blank-allowed-by-scheme-expected.txt
frame-src-about-blank-allowed-by-scheme.html
frame-src-allowed-expected.txt
frame-src-allowed.html
frame-src-blocked.html
frame-src-child-frame-navigates-to-blocked-origin.html
frame-src-cross-origin-load-expected.txt
frame-src-cross-origin-load.html
frame-src-redirect-blocked.html
frame-src-vs-shift-click-expected.txt
frame-src-vs-shift-click.html
function-constructor-allowed-expected.txt
function-constructor-allowed.html
function-constructor-blocked-expected.txt
function-constructor-blocked.html
icon-allowed-expected.txt
icon-allowed.html
icon-blocked-expected.txt
icon-blocked.html
iframe-inside-csp-expected.txt
iframe-inside-csp.html
image-document-default-src-none-expected.txt
image-document-default-src-none.html
img-blocked-no-gc-crash.html
injected-inline-script-allowed-expected.txt
injected-inline-script-allowed.html
injected-inline-script-blocked-expected.txt
injected-inline-script-blocked.html
inline-event-handler-blocked-after-injecting-meta-expected.txt
inline-event-handler-blocked-after-injecting-meta.html
inline-script-allowed-expected.txt
inline-script-allowed.html
inline-script-blocked-expected.txt
inline-script-blocked-goofy-expected.txt
inline-script-blocked-goofy.html
inline-script-blocked.html
inline-style-allowed-while-cloning-objects.html
invalid-meta-directives-expected.txt
invalid-meta-directives.html
manifest-redirect-blocked-by-connect-src.html
manifest-src-allowed-expected.txt
manifest-src-allowed.html
manifest-src-blocked-expected.txt
manifest-src-blocked.html
multiple-enforce-policies-expected.txt
multiple-enforce-policies.php
multiple-policies-with-nonce.php
no-policy-expected.txt
no-policy.html
object-src-applet-archive-codebase-expected.txt
object-src-applet-archive-codebase.html
object-src-applet-archive-expected.txt
object-src-applet-archive.html
object-src-applet-code-codebase-expected.txt
object-src-applet-code-codebase.html
object-src-applet-code-expected.txt
object-src-applet-code.html
object-src-does-not-affect-child-expected.txt
object-src-does-not-affect-child.html
object-src-image-url-blocked-expected.txt
object-src-image-url-blocked.html
object-src-no-url-allowed-expected.txt
object-src-no-url-allowed.html
object-src-no-url-blocked-expected.txt
object-src-no-url-blocked.html
object-src-none-allowed-expected.txt
object-src-none-allowed.html
object-src-none-blocked-expected.txt
object-src-none-blocked.html
object-src-param-code-blocked-expected.txt
object-src-param-code-blocked.html
object-src-param-movie-blocked-expected.txt
object-src-param-movie-blocked.html
object-src-param-src-blocked-expected.txt
object-src-param-src-blocked.html
object-src-param-url-blocked-expected.txt
object-src-param-url-blocked.html
object-src-url-allowed-expected.txt
object-src-url-allowed.html
object-src-url-blocked-expected.txt
object-src-url-blocked.html
plugin-in-iframe-with-csp-expected.txt
plugin-in-iframe-with-csp.html
policy-does-not-affect-child-expected.txt
policy-does-not-affect-child.html
redirect-does-not-match-paths.html
redirect-with-delay.html
register-bypassing-scheme-expected.txt
register-bypassing-scheme-partial-expected.txt
register-bypassing-scheme-partial.html
register-bypassing-scheme-script.https-expected.txt
register-bypassing-scheme-script.https.html
register-bypassing-scheme.html
report-only-report-uri-missing-expected.txt
report-only-report-uri-missing.php
sandbox-allow-scripts-expected.txt
sandbox-allow-scripts-in-http-header-control-expected.txt
sandbox-allow-scripts-in-http-header-control.html
sandbox-allow-scripts-in-http-header-expected.txt
sandbox-allow-scripts-in-http-header.html
sandbox-allow-scripts-subframe-expected.txt
sandbox-allow-scripts-subframe.php
sandbox-allow-scripts.php
sandbox-empty-expected.txt
sandbox-empty-subframe-expected.txt
sandbox-empty-subframe.html
sandbox-empty.html
sandbox-in-http-header-control-expected.txt
sandbox-in-http-header-control.html
sandbox-in-http-header.html
sandbox-invalid-header-expected.txt
sandbox-invalid-header.html
sandbox-report-only-expected.txt
sandbox-report-only.html
script-loads-with-img-src-expected.txt
script-loads-with-img-src.html
script-src-appended-script-expected.txt
script-src-appended-script.html
script-src-blocked-error-event.html
script-src-in-iframe-expected.txt
script-src-in-iframe.html
script-src-none-expected.txt
script-src-none-inline-event-expected.txt
script-src-none-inline-event.html
script-src-none.html
script-src-overrides-default-src-expected.txt
script-src-overrides-default-src.html
script-src-redirect-expected.txt
script-src-redirect.html
script-src-self-blocked-01-expected.txt
script-src-self-blocked-01.html
script-src-self-blocked-02-expected.txt
script-src-self-blocked-02.html
script-src-self-blocked-03-expected.txt
script-src-self-blocked-03.html
script-src-self-expected.txt
script-src-self.html
script-src-star-cross-scheme-expected.txt
script-src-star-cross-scheme.html
script-src-wildcards-disallowed.html
source-list-parsing-01-expected.txt
source-list-parsing-01.html
source-list-parsing-02-expected.txt
source-list-parsing-02.html
source-list-parsing-03-expected.txt
source-list-parsing-03.html
source-list-parsing-04-expected.txt
source-list-parsing-04.html
source-list-parsing-05-expected.txt
source-list-parsing-05.html
source-list-parsing-06-expected.txt
source-list-parsing-06.html
source-list-parsing-07-expected.txt
source-list-parsing-07.html
source-list-parsing-08-expected.txt
source-list-parsing-08.html
source-list-parsing-09-expected.txt
source-list-parsing-09.html
source-list-parsing-10-expected.txt
source-list-parsing-10.html
source-list-parsing-11.html
source-list-parsing-deprecated-expected.txt
source-list-parsing-deprecated.html
source-list-parsing-malformed-meta-expected.txt
source-list-parsing-malformed-meta.html
source-list-parsing-no-semicolon-expected.txt
source-list-parsing-no-semicolon.html
source-list-parsing-nonascii-expected.txt
source-list-parsing-nonascii.html
source-list-parsing-none-expected.txt
source-list-parsing-none.html
source-list-parsing-paths-01-expected.txt
source-list-parsing-paths-01.html
source-list-parsing-paths-02-expected.txt
source-list-parsing-paths-02.html
source-list-parsing-paths-03-expected.txt
source-list-parsing-paths-03.html
srcdoc-doesnt-bypass-script-src-expected.txt
srcdoc-doesnt-bypass-script-src.html
worklet-import-blocked-expected.txt
worklet-import-blocked.html
xmlhttprequest-protected-resource-does-not-crash-expected.txt
xmlhttprequest-protected-resource-does-not-crash.html
xsl-allowed-expected.txt
xsl-allowed.php
xsl-blocked-expected.png
xsl-blocked-expected.txt
xsl-blocked.php
xsl-img-blocked-expected.txt
xsl-img-blocked.php
xsl-unaffected-by-style-src-1-expected.png
xsl-unaffected-by-style-src-1-expected.txt
xsl-unaffected-by-style-src-1.php
xsl-unaffected-by-style-src-2-expected.txt
xsl-unaffected-by-style-src-2.php