frame-ancestors-nested-cross-in-sandboxed-cross-url-block.html (670B)
1 <!DOCTYPE html> 2 <html> 3 <head> 4 <script src="/resources/testharness.js"></script> 5 <script src="/resources/testharnessreport.js"></script> 6 <script src="support/frame-ancestors-test.sub.js"></script> 7 </head> 8 <body> 9 <script> 10 test = async_test("A 'frame-ancestors' CSP directive with a URL value should compare against each frame's origin rather than URL, " + 11 "so a nested frame with a sandboxed parent frame should be blocked due to the parent having a unique origin."); 12 13 testNestedSandboxedIFrame(SAMEORIGIN_ORIGIN + " " + CROSSORIGIN_ORIGIN, CROSS_ORIGIN, CROSS_ORIGIN, EXPECT_BLOCK); 14 </script> 15 </body> 16 </html>