report-blocked-uri.html (649B)
1 <!DOCTYPE html> 2 <html> 3 <head> 4 <script src="/resources/testharness.js"></script> 5 <script src="/resources/testharnessreport.js"></script> 6 <title>Blocked relative images are reported correctly</title> 7 <!-- CSP headers 8 Content-Security-Policy: script-src 'self' 'unsafe-inline' 9 Content-Security-Policy-Report-Only: img-src 'none'; script-src 'self' 'unsafe-inline'; report-uri /reporting/resources/report.py?op=put&reportID={{$id}} 10 --> 11 </head> 12 <body> 13 <img src="../support/pass.png"> 14 <script async defer src='../support/checkReport.sub.js?reportField=violated-directive&reportValue=img-src%20%27none%27'></script> 15 </body> 16 </html>