tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

files / testing / web-platform / tests / content-security-policy / script-src


ModeNameSize
-rw-r--r--10_1_support_1.js4L
-rw-r--r--10_1_support_2.js5L
-rw-r--r--addInlineTestsWithDOMManipulation.js28L
-rw-r--r--buildInlineWorker.js21L
-rw-r--r--crossoriginScript.js3L
-rw-r--r--crossoriginScript.js.headers1L
-rw-r--r--eval-allowed-in-report-only-mode-and-sends-report.html19L
-rw-r--r--eval-allowed-in-report-only-mode-and-sends-report.html.sub.headers2L
-rw-r--r--eval-allowed-in-report-only-mode.html17L
-rw-r--r--eval-allowed-in-report-only-mode.html.sub.headers1L
-rw-r--r--externalScript.js1L
-rw-r--r--injected-inline-script-allowed.sub.html24L
-rw-r--r--injected-inline-script-blocked.sub.html25L
-rw-r--r--inlineSuccessTest.js12L
-rw-r--r--inlineTests.js22L
-rw-r--r--javascript-window-open-blocked.html20L
-rw-r--r--javascript-window-open-blocked.html.sub.headers6L
-rw-r--r--nonce-enforce-blocked.html81L
-rw-r--r--script-src-1_1.html20L
-rw-r--r--script-src-1_10.html31L
-rw-r--r--script-src-1_10_1.html19L
-rw-r--r--script-src-1_2.html20L
-rw-r--r--script-src-1_2_1.html21L
-rw-r--r--script-src-1_3.html18L
-rw-r--r--script-src-1_4.html28L
-rw-r--r--script-src-1_4_1.html33L
-rw-r--r--script-src-1_4_2.html31L
-rw-r--r--script-src-event-handler-on-inline-script.html35L
-rw-r--r--script-src-multiple-policies-multiple-hashing-algorithms.html26L
-rw-r--r--script-src-multiple-policies-multiple-hashing-algorithms.html.sub.headers6L
-rw-r--r--script-src-multiple-policies-one-using-hashing-algorithms.html26L
-rw-r--r--script-src-multiple-policies-one-using-hashing-algorithms.html.sub.headers6L
-rw-r--r--script-src-overrides-default-src.sub.html27L
-rw-r--r--script-src-report-only-policy-works-with-external-hash-policy.html25L
-rw-r--r--script-src-report-only-policy-works-with-external-hash-policy.html.sub.headers6L
-rw-r--r--script-src-report-only-policy-works-with-hash-policy.html31L
-rw-r--r--script-src-report-only-policy-works-with-hash-policy.html.sub.headers6L
-rw-r--r--script-src-sri_hash.sub.html114L
-rw-r--r--script-src-sri_hash.sub.html.sub.headers5L
-rw-r--r--script-src-strict_dynamic_and_unsafe_eval_eval.html31L
-rw-r--r--script-src-strict_dynamic_and_unsafe_eval_eval.html.headers5L
-rw-r--r--script-src-strict_dynamic_and_unsafe_eval_new_function.html31L
-rw-r--r--script-src-strict_dynamic_and_unsafe_eval_new_function.html.headers5L
-rw-r--r--script-src-strict_dynamic_discard_source_expressions.html32L
-rw-r--r--script-src-strict_dynamic_discard_source_expressions.html.headers5L
-rw-r--r--script-src-strict_dynamic_double_policy_different_nonce.html68L
-rw-r--r--script-src-strict_dynamic_double_policy_different_nonce.html.headers6L
-rw-r--r--script-src-strict_dynamic_double_policy_honor_source_expressions.sub.html61L
-rw-r--r--script-src-strict_dynamic_double_policy_honor_source_expressions.sub.html.headers6L
-rw-r--r--script-src-strict_dynamic_double_policy_report_only.html44L
-rw-r--r--script-src-strict_dynamic_double_policy_report_only.html.headers6L
-rw-r--r--script-src-strict_dynamic_eval.html38L
-rw-r--r--script-src-strict_dynamic_eval.html.headers5L
-rw-r--r--script-src-strict_dynamic_hashes.html63L
-rw-r--r--script-src-strict_dynamic_hashes.html.headers5L
-rw-r--r--script-src-strict_dynamic_in_img-src.html32L
-rw-r--r--script-src-strict_dynamic_in_img-src.html.headers5L
-rw-r--r--script-src-strict_dynamic_javascript_uri.html32L
-rw-r--r--script-src-strict_dynamic_javascript_uri.html.headers5L
-rw-r--r--script-src-strict_dynamic_meta_tag.html76L
-rw-r--r--script-src-strict_dynamic_meta_tag.html.headers4L
-rw-r--r--script-src-strict_dynamic_new_function.html37L
-rw-r--r--script-src-strict_dynamic_new_function.html.headers5L
-rw-r--r--script-src-strict_dynamic_non_parser_inserted.html76L
-rw-r--r--script-src-strict_dynamic_non_parser_inserted.html.headers5L
-rw-r--r--script-src-strict_dynamic_non_parser_inserted_incorrect_nonce.html29L
-rw-r--r--script-src-strict_dynamic_non_parser_inserted_incorrect_nonce.html.headers5L
-rw-r--r--script-src-strict_dynamic_parser_inserted.html206L
-rw-r--r--script-src-strict_dynamic_parser_inserted.html.headers5L
-rw-r--r--script-src-strict_dynamic_parser_inserted_correct_nonce.html110L
-rw-r--r--script-src-strict_dynamic_parser_inserted_correct_nonce.html.headers5L
-rw-r--r--script-src-strict_dynamic_worker-importScripts.https.html18L
-rw-r--r--script-src-strict_dynamic_worker.https.html20L
-rw-r--r--script-src-trusted_types_eval_DedicatedWorker.html15L
-rw-r--r--script-src-trusted_types_eval_with_report_only_require_trusted_types_eval.html103L
-rw-r--r--script-src-trusted_types_eval_with_report_only_require_trusted_types_eval.html.headers6L
-rw-r--r--script-src-trusted_types_eval_with_require_trusted_types_eval.html88L
-rw-r--r--script-src-trusted_types_eval_with_require_trusted_types_eval.html.headers5L
-rw-r--r--script-src-trusted_types_eval_without_require_trusted_types_eval.html101L
-rw-r--r--script-src-trusted_types_eval_without_require_trusted_types_eval.html.headers5L
-rw-r--r--script-src-wildcards-disallowed.html63L
-rw-r--r--scripthash-allowed.sub.html42L
-rw-r--r--scripthash-base64url-converts-to-base64.sub.html40L
-rw-r--r--scripthash-basic-blocked-error-event.html10L
-rw-r--r--scripthash-basic-blocked.sub.html72L
-rw-r--r--scripthash-case-insensitive.sub.html60L
-rw-r--r--scripthash-changed-1.html35L
-rw-r--r--scripthash-changed-2.html35L
-rw-r--r--scripthash-default-src.sub.html21L
-rw-r--r--scripthash-ignore-unsafeinline.sub.html56L
-rw-r--r--scripthash-unicode-normalization.sub.html72L
-rw-r--r--scriptnonce-allowed.sub.html68L
-rw-r--r--scriptnonce-and-scripthash.sub.html79L
-rw-r--r--scriptnonce-basic-blocked.sub.html43L
-rw-r--r--scriptnonce-changed-1.html31L
-rw-r--r--scriptnonce-changed-2.html31L
-rw-r--r--scriptnonce-ignore-unsafeinline.sub.html74L
-rw-r--r--scriptnonce-redirect.sub.html62L
-rw-r--r--scriptnonce-specified-source.sub.html43L
-rw-r--r--scriptnonce-specified-source.sub.html.sub.headers1L
-rw-r--r--simpleSourcedScript.js1L
-rw-r--r--srcdoc-doesnt-bypass-script-src.sub.html35L
-rw-r--r--worker-data-set-timeout.sub.html28L
-rw-r--r--worker-eval-blocked.sub.html38L
-rw-r--r--worker-function-function-blocked.sub.html37L
-rw-r--r--worker-importscripts.sub.html26L
-rw-r--r--worker-script-src.sub.html32L
-rw-r--r--worker-set-timeout.sub.html26L
d---------hash-always-converted-to-utf-8/-
d---------support/-
d---------tentative/-