file_strict_dynamic_default_src.html (552B)
1 <!DOCTYPE HTML> 2 <html> 3 <head> 4 <title>Bug 1299483 - CSP: Implement 'strict-dynamic'</title> 5 </head> 6 <body> 7 8 <div id="testdiv">blocked</div> 9 <script nonce="foo" src="http://mochi.test:8888/tests/dom/security/test/csp/file_strict_dynamic_default_src.js"></script> 10 11 <img id="testimage" src="http://mochi.test:8888/tests/image/test/mochitest/blue.png" data-result="blocked"> 12 <script> 13 let img = document.getElementById("testimage"); 14 img.addEventListener("load", function() { 15 img.dataset.result = "allowed"; 16 }, { once: true }); 17 </script> 18 19 </body> 20 </html>