| <!DOCTYPE html> |
| <meta name="timeout" content="long"> |
| <script src="/common/utils.js"></script> |
| <script src="/resources/testharness.js"></script> |
| <script src="/resources/testharnessreport.js"></script> |
| <script src="../resources/utils.js"></script> |
| <script src="resources/utils.js"></script> |
| |
| <body> |
| <script> |
| setup(() => assertSpeculationRulesIsSupported()); |
| |
| promise_test(async t => { |
| // The key used for storing a test result in the server. |
| const key = token(); |
| |
| // Open the test runner in a popup - it will prerender itself, record the |
| // test results, and send them back to this harness. |
| const url = |
| `resources/csp-script-src-self.html?key=${key}`; |
| window.open(url, '_blank', 'noopener'); |
| |
| // Wait until the test sends us the results. |
| const result = await nextValueFromServer(key); |
| |
| assert_equals(result, "blocked by script-src-elem", "csp block"); |
| }, 'Test if CSP script-src self does not permit inline speculationrules.'); |
| </script> |
