report-uri-multiple-reversed.html (692B)
1 <!DOCTYPE html> 2 <html> 3 <head> 4 <script src="/resources/testharness.js"></script> 5 <script src="/resources/testharnessreport.js"></script> 6 <title>Content-Security-Policy-Report-Only violation report is sent even when resource is blocked by actual policy.</title> 7 <!-- CSP headers 8 Content-Security-Policy-Report-Only: img-src http://*; report-uri /reporting/resources/report.py?op=put&reportID={{$id}} 9 Content-Security-Policy: img-src http://* 10 --> 11 </head> 12 <body> 13 <img src="ftp://blah.test" /> 14 <script async defer src='../support/checkReport.sub.js?reportField=violated-directive&reportValue=img-src%20http%3A%2F%2F%2A'></script> 15 </body> 16 </html>