file_doccomment_meta.html (843B)
1 <!DOCTYPE HTML> 2 <html> 3 <head> 4 <title>Bug 663570 - Test doc.write(meta csp)</title> 5 <meta charset="utf-8"> 6 7 <!-- Use doc.write() to *un*apply meta csp --> 8 <script type="application/javascript"> 9 document.write("<!--"); 10 </script> 11 12 <meta http-equiv="Content-Security-Policy" content= "style-src 'none'; script-src 'none'; img-src 'none'"> 13 --> 14 15 <!-- try to load a css on a page where meta CSP is commented out --> 16 <link rel="stylesheet" type="text/css" href="file_docwrite_meta.css"> 17 18 <!-- try to load a script on a page where meta CSP is commented out --> 19 <script id="testscript" src="file_docwrite_meta.js"></script> 20 21 </head> 22 <body> 23 24 <!-- try to load an image on a page where meta CSP is commented out --> 25 <img id="testimage" src="http://mochi.test:8888/tests/image/test/mochitest/blue.png"></img> 26 27 </body> 28 </html>