mirror of
https://github.com/roytam1/UXP.git
synced 2026-05-26 22:46:03 +00:00
Moonchild
8c395520d9
Since these are just interpreted comments, there's 0 impact on actual code. This removes all lines that match /* vim: set(.*)tw=80: */ with S&R -- there are a few others scattered around which will be removed manually in a second part.
55 lines
2.1 KiB
JavaScript
55 lines
2.1 KiB
JavaScript
/* -*- indent-tabs-mode: nil; js-indent-level: 2 -*- */
|
|
/* Any copyright is dedicated to the Public Domain.
|
|
* http://creativecommons.org/publicdomain/zero/1.0/ */
|
|
|
|
/* We are loading:
|
|
a script that is allowed by the CSP header but not by the CSPRO header
|
|
an image which is allowed by the CSPRO header but not by the CSP header.
|
|
|
|
So we expect a warning (image has been blocked) and a report
|
|
(script should not load and was reported)
|
|
|
|
The expected console messages in the constants CSP_VIOLATION_MSG and
|
|
CSP_REPORT_MSG are confirmed to be found in the console messages.
|
|
*/
|
|
|
|
"use strict";
|
|
|
|
const TEST_URI = "data:text/html;charset=utf8,Web Console CSP report only " +
|
|
"test (bug 1010953)";
|
|
const TEST_VIOLATION = "http://example.com/browser/devtools/client/" +
|
|
"webconsole/test/test_bug_1010953_cspro.html";
|
|
const CSP_VIOLATION_MSG = "Content Security Policy: The page\u2019s settings " +
|
|
"blocked the loading of a resource at " +
|
|
"http://some.example.com/test.png " +
|
|
"(\u201cimg-src http://example.com\u201d).";
|
|
const CSP_REPORT_MSG = "Content Security Policy: The page\u2019s settings " +
|
|
"observed the loading of a resource at " +
|
|
"http://some.example.com/test_bug_1010953_cspro.js " +
|
|
"(\u201cscript-src http://example.com\u201d). A CSP report is " +
|
|
"being sent.";
|
|
|
|
add_task(function* () {
|
|
let { browser } = yield loadTab(TEST_URI);
|
|
|
|
let hud = yield openConsole();
|
|
|
|
hud.jsterm.clearOutput();
|
|
|
|
let loaded = loadBrowser(browser);
|
|
BrowserTestUtils.loadURI(browser, TEST_VIOLATION);
|
|
yield loaded;
|
|
|
|
yield waitForSuccess({
|
|
name: "Confirmed that CSP and CSP-Report-Only log different messages to " +
|
|
"the console.",
|
|
validator: function () {
|
|
console.log(hud.outputNode.textContent);
|
|
let success = false;
|
|
success = hud.outputNode.textContent.indexOf(CSP_VIOLATION_MSG) > -1 &&
|
|
hud.outputNode.textContent.indexOf(CSP_REPORT_MSG) > -1;
|
|
return success;
|
|
}
|
|
});
|
|
});
|