scripthash-default-src.sub.html (690B)
1 <!DOCTYPE html> 2 <html> 3 <head> 4 <meta http-equiv="Content-Security-Policy" content="default-src 'self' 'nonce-abc' 'sha256-sc3CeiHrlck5tH2tTC4MnBYFnI9D5zp8f9odqnmGQjE='; connect-src 'self';"> 5 <title>script-hash allowed from default-src</title> 6 <script src="/resources/testharness.js"></script> 7 <script src="/resources/testharnessreport.js"></script> 8 <script nonce='abc'> 9 setup({ single_test: true }); 10 window.addEventListener('securitypolicyviolation', function(e) { 11 assert_unreached("Should not have fired event"); 12 }); 13 </script> 14 15 <script>done();</script> 16 </head> 17 18 <body> 19 <div id="log"></div> 20 </body> 21 </html>