52 lines
1.9 KiB
HTML
52 lines
1.9 KiB
HTML
<!DOCTYPE HTML>
|
|
<html>
|
|
<head>
|
|
<script src='/resources/testharness.js'></script>
|
|
<script src='/resources/testharnessreport.js'></script>
|
|
<title>Test that a 304 response will update the CSP header</title>
|
|
</head>
|
|
<body>
|
|
<script>
|
|
var t1 = async_test("Test that the first frame uses nonce abc");
|
|
var t2 = async_test("Test that the first frame does not use nonce def");
|
|
|
|
var t3 = async_test("Test that the second frame uses nonce def");
|
|
var t4 = async_test("Test that the second frame does not use nonce abc");
|
|
|
|
var i1 = document.createElement('iframe');
|
|
// We add a random parameter to avoid previous tests cached requests.
|
|
// We want to make sure i1 gets a 200 code and i2 gets a 304 code.
|
|
i1.src = "support/304-response.py?{{$id:uuid()}}";
|
|
|
|
var i2 = document.createElement('iframe');
|
|
i2.src = "support/304-response.py?{{$id}}";
|
|
|
|
var load_second_frame = function() {
|
|
document.body.appendChild(i2);
|
|
}
|
|
|
|
window.onmessage = function(e) {
|
|
if (e.source == i1.contentWindow) {
|
|
if (e.data == "abc_executed") { t1.done(); return; }
|
|
if (e.data == "script-src 'nonce-abc' 'sha256-IIB78ZS1RMMrAWpsLg/RrDbVPhI14rKm3sFOeKPYulw='") { t2.done(); return; }
|
|
|
|
t1.step(function() { assert_unreached("Unexpected message received"); });
|
|
t2.step(function() { assert_unreached("Unexpected message received"); });
|
|
}
|
|
|
|
if (e.source == i2.contentWindow) {
|
|
if (e.data == "def_executed") { t3.done(); return; }
|
|
if (e.data == "script-src 'nonce-def' 'sha256-IIB78ZS1RMMrAWpsLg/RrDbVPhI14rKm3sFOeKPYulw='") { t4.done(); return; }
|
|
|
|
t3.step(function() { assert_unreached("Unexpected message received"); });
|
|
t4.step(function() { assert_unreached("Unexpected message received"); });
|
|
}
|
|
|
|
};
|
|
|
|
i1.onload = load_second_frame;
|
|
document.body.appendChild(i1);
|
|
</script>
|
|
</body>
|
|
|
|
</html>
|