frame-ancestors-nested-cross-in-cross-url-allow.html (526B)
1 <!DOCTYPE html> 2 <html> 3 <head> 4 <script src="/resources/testharness.js"></script> 5 <script src="/resources/testharnessreport.js"></script> 6 <script src="support/frame-ancestors-test.sub.js"></script> 7 </head> 8 <body> 9 <script> 10 test = async_test("A 'frame-ancestors' CSP directive with a URL value should block or allow rendering in nested frames as appropriate."); 11 12 testNestedIFrame(SAMEORIGIN_ORIGIN + " " + CROSSORIGIN_ORIGIN, CROSS_ORIGIN, CROSS_ORIGIN, EXPECT_LOAD); 13 </script> 14 </body> 15 </html>