tree: 92a07a9c3d38b72f94dc0268ecbcdcd732c13bbf [path history] [tgz]
  1. 1.1/
  2. cascade/
  3. csp3-experimental/
  4. manifest.test/
  5. nonces/
  6. require-sri-for/
  7. resources/
  8. securitypolicyviolation/
  9. strict-dynamic/
  10. blob-urls-match-self.html
  11. block-mixed-content-hides-warning-expected.txt
  12. block-mixed-content-hides-warning.html
  13. cached-frame-csp-expected.txt
  14. cached-frame-csp.html
  15. combine-multiple-policies-expected.txt
  16. combine-multiple-policies.html
  17. connect-src-anchor-ping-expected.txt
  18. connect-src-anchor-ping.html
  19. connect-src-beacon-allowed-expected.txt
  20. connect-src-beacon-allowed.html
  21. connect-src-eventsource-allowed-expected.txt
  22. connect-src-eventsource-allowed.html
  23. connect-src-preload-allowed.html
  24. connect-src-preload-blocked.html
  25. connect-src-websocket-allowed-expected.txt
  26. connect-src-websocket-allowed.html
  27. connect-src-xmlhttprequest-allowed-expected.txt
  28. connect-src-xmlhttprequest-allowed.html
  29. csp-header-is-sent.html
  30. default-src-inline-allowed-expected.txt
  31. default-src-inline-allowed.html
  32. default-src-inline-blocked-expected.txt
  33. default-src-inline-blocked.html
  34. directive-parsing-01-expected.txt
  35. directive-parsing-01.html
  36. directive-parsing-02-expected.txt
  37. directive-parsing-02.html
  38. directive-parsing-03-expected.txt
  39. directive-parsing-03.html
  40. directive-parsing-04-expected.txt
  41. directive-parsing-04.html
  42. directive-parsing-05-expected.txt
  43. directive-parsing-05.html
  44. directive-parsing-multiple-headers-expected.txt
  45. directive-parsing-multiple-headers.html
  46. duplicate-directive-expected.txt
  47. duplicate-directive.html
  48. embed-src-image-url-blocked-expected.txt
  49. embed-src-image-url-blocked.html
  50. eval-allowed-expected.txt
  51. eval-allowed.html
  52. eval-blocked-and-sends-report-expected.txt
  53. eval-blocked-and-sends-report.php
  54. eval-blocked-expected.txt
  55. eval-blocked-in-about-blank-iframe-expected.txt
  56. eval-blocked-in-about-blank-iframe.html
  57. eval-blocked.html
  58. eval-scripts-setInterval-allowed-expected.txt
  59. eval-scripts-setInterval-allowed.html
  60. eval-scripts-setInterval-blocked-expected.txt
  61. eval-scripts-setInterval-blocked.html
  62. eval-scripts-setTimeout-allowed-expected.txt
  63. eval-scripts-setTimeout-allowed.html
  64. eval-scripts-setTimeout-blocked-expected.txt
  65. eval-scripts-setTimeout-blocked.html
  66. filesystem-urls-match-self.html
  67. frame-src-about-blank-allowed-by-default-expected.txt
  68. frame-src-about-blank-allowed-by-default.html
  69. frame-src-about-blank-allowed-by-scheme-expected.txt
  70. frame-src-about-blank-allowed-by-scheme.html
  71. frame-src-allowed-expected.txt
  72. frame-src-allowed.html
  73. frame-src-blocked.html
  74. frame-src-child-frame-navigates-to-blocked-origin.html
  75. frame-src-cross-origin-load-expected.txt
  76. frame-src-cross-origin-load.html
  77. frame-src-redirect-blocked.html
  78. frame-src-vs-shift-click-expected.txt
  79. frame-src-vs-shift-click.html
  80. function-constructor-allowed-expected.txt
  81. function-constructor-allowed.html
  82. function-constructor-blocked-expected.txt
  83. function-constructor-blocked.html
  84. icon-allowed-expected.txt
  85. icon-allowed.html
  86. icon-blocked-expected.txt
  87. icon-blocked.html
  88. iframe-inside-csp-expected.txt
  89. iframe-inside-csp.html
  90. image-document-default-src-none-expected.txt
  91. image-document-default-src-none.html
  92. img-blocked-no-gc-crash.html
  93. injected-inline-script-allowed-expected.txt
  94. injected-inline-script-allowed.html
  95. injected-inline-script-blocked-expected.txt
  96. injected-inline-script-blocked.html
  97. inline-event-handler-blocked-after-injecting-meta-expected.txt
  98. inline-event-handler-blocked-after-injecting-meta.html
  99. inline-script-allowed-expected.txt
  100. inline-script-allowed.html
  101. inline-script-blocked-expected.txt
  102. inline-script-blocked-goofy-expected.txt
  103. inline-script-blocked-goofy.html
  104. inline-script-blocked.html
  105. inline-style-allowed-while-cloning-objects.html
  106. invalid-meta-directives-expected.txt
  107. invalid-meta-directives.html
  108. manifest-redirect-blocked-by-connect-src.html
  109. manifest-src-allowed-expected.txt
  110. manifest-src-allowed.html
  111. manifest-src-blocked-expected.txt
  112. manifest-src-blocked.html
  113. multiple-enforce-policies-expected.txt
  114. multiple-enforce-policies.php
  115. multiple-policies-with-nonce.php
  116. no-policy-expected.txt
  117. no-policy.html
  118. object-src-applet-archive-codebase-expected.txt
  119. object-src-applet-archive-codebase.html
  120. object-src-applet-archive-expected.txt
  121. object-src-applet-archive.html
  122. object-src-applet-code-codebase-expected.txt
  123. object-src-applet-code-codebase.html
  124. object-src-applet-code-expected.txt
  125. object-src-applet-code.html
  126. object-src-does-not-affect-child-expected.txt
  127. object-src-does-not-affect-child.html
  128. object-src-image-url-blocked-expected.txt
  129. object-src-image-url-blocked.html
  130. object-src-no-url-allowed-expected.txt
  131. object-src-no-url-allowed.html
  132. object-src-no-url-blocked-expected.txt
  133. object-src-no-url-blocked.html
  134. object-src-none-allowed-expected.txt
  135. object-src-none-allowed.html
  136. object-src-none-blocked-expected.txt
  137. object-src-none-blocked.html
  138. object-src-param-code-blocked-expected.txt
  139. object-src-param-code-blocked.html
  140. object-src-param-movie-blocked-expected.txt
  141. object-src-param-movie-blocked.html
  142. object-src-param-src-blocked-expected.txt
  143. object-src-param-src-blocked.html
  144. object-src-param-url-blocked-expected.txt
  145. object-src-param-url-blocked.html
  146. object-src-url-allowed-expected.txt
  147. object-src-url-allowed.html
  148. object-src-url-blocked-expected.txt
  149. object-src-url-blocked.html
  150. plugin-in-iframe-with-csp-expected.txt
  151. plugin-in-iframe-with-csp.html
  152. policy-does-not-affect-child-expected.txt
  153. policy-does-not-affect-child.html
  154. redirect-does-not-match-paths.html
  155. redirect-with-delay.html
  156. register-bypassing-scheme-expected.txt
  157. register-bypassing-scheme-partial-expected.txt
  158. register-bypassing-scheme-partial.html
  159. register-bypassing-scheme-script.https-expected.txt
  160. register-bypassing-scheme-script.https.html
  161. register-bypassing-scheme.html
  162. report-only-report-uri-missing-expected.txt
  163. report-only-report-uri-missing.php
  164. sandbox-allow-scripts-expected.txt
  165. sandbox-allow-scripts-in-http-header-control-expected.txt
  166. sandbox-allow-scripts-in-http-header-control.html
  167. sandbox-allow-scripts-in-http-header-expected.txt
  168. sandbox-allow-scripts-in-http-header.html
  169. sandbox-allow-scripts-subframe-expected.txt
  170. sandbox-allow-scripts-subframe.php
  171. sandbox-allow-scripts.php
  172. sandbox-empty-expected.txt
  173. sandbox-empty-subframe-expected.txt
  174. sandbox-empty-subframe.html
  175. sandbox-empty.html
  176. sandbox-in-http-header-control-expected.txt
  177. sandbox-in-http-header-control.html
  178. sandbox-in-http-header.html
  179. sandbox-invalid-header-expected.txt
  180. sandbox-invalid-header.html
  181. sandbox-report-only-expected.txt
  182. sandbox-report-only.html
  183. script-loads-with-img-src-expected.txt
  184. script-loads-with-img-src.html
  185. script-src-appended-script-expected.txt
  186. script-src-appended-script.html
  187. script-src-blocked-error-event.html
  188. script-src-in-iframe-expected.txt
  189. script-src-in-iframe.html
  190. script-src-none-expected.txt
  191. script-src-none-inline-event-expected.txt
  192. script-src-none-inline-event.html
  193. script-src-none.html
  194. script-src-overrides-default-src-expected.txt
  195. script-src-overrides-default-src.html
  196. script-src-redirect-expected.txt
  197. script-src-redirect.html
  198. script-src-self-blocked-01-expected.txt
  199. script-src-self-blocked-01.html
  200. script-src-self-blocked-02-expected.txt
  201. script-src-self-blocked-02.html
  202. script-src-self-blocked-03-expected.txt
  203. script-src-self-blocked-03.html
  204. script-src-self-expected.txt
  205. script-src-self.html
  206. script-src-star-cross-scheme-expected.txt
  207. script-src-star-cross-scheme.html
  208. script-src-wildcards-disallowed.html
  209. source-list-parsing-01-expected.txt
  210. source-list-parsing-01.html
  211. source-list-parsing-02-expected.txt
  212. source-list-parsing-02.html
  213. source-list-parsing-03-expected.txt
  214. source-list-parsing-03.html
  215. source-list-parsing-04-expected.txt
  216. source-list-parsing-04.html
  217. source-list-parsing-05-expected.txt
  218. source-list-parsing-05.html
  219. source-list-parsing-06-expected.txt
  220. source-list-parsing-06.html
  221. source-list-parsing-07-expected.txt
  222. source-list-parsing-07.html
  223. source-list-parsing-08-expected.txt
  224. source-list-parsing-08.html
  225. source-list-parsing-09-expected.txt
  226. source-list-parsing-09.html
  227. source-list-parsing-10-expected.txt
  228. source-list-parsing-10.html
  229. source-list-parsing-11.html
  230. source-list-parsing-deprecated-expected.txt
  231. source-list-parsing-deprecated.html
  232. source-list-parsing-malformed-meta-expected.txt
  233. source-list-parsing-malformed-meta.html
  234. source-list-parsing-no-semicolon-expected.txt
  235. source-list-parsing-no-semicolon.html
  236. source-list-parsing-nonascii-expected.txt
  237. source-list-parsing-nonascii.html
  238. source-list-parsing-none-expected.txt
  239. source-list-parsing-none.html
  240. source-list-parsing-paths-01-expected.txt
  241. source-list-parsing-paths-01.html
  242. source-list-parsing-paths-02-expected.txt
  243. source-list-parsing-paths-02.html
  244. source-list-parsing-paths-03-expected.txt
  245. source-list-parsing-paths-03.html
  246. srcdoc-doesnt-bypass-script-src-expected.txt
  247. srcdoc-doesnt-bypass-script-src.html
  248. worklet-import-blocked-expected.txt
  249. worklet-import-blocked.html
  250. xmlhttprequest-protected-resource-does-not-crash-expected.txt
  251. xmlhttprequest-protected-resource-does-not-crash.html
  252. xsl-allowed-expected.txt
  253. xsl-allowed.php
  254. xsl-blocked-expected.png
  255. xsl-blocked-expected.txt
  256. xsl-blocked.php
  257. xsl-img-blocked-expected.txt
  258. xsl-img-blocked.php
  259. xsl-unaffected-by-style-src-1-expected.png
  260. xsl-unaffected-by-style-src-1-expected.txt
  261. xsl-unaffected-by-style-src-1.php
  262. xsl-unaffected-by-style-src-2-expected.txt
  263. xsl-unaffected-by-style-src-2.php