mirror of
https://github.com/roytam1/palemoon27.git
synced 2026-05-26 14:18:48 +00:00
roytam1
ebd6e6dc19
- Bug 1174323 - Disable screenClientXYConst subtest of pointerlock test on OS X. rs=KWierso (2d0db6d1b) - Bug 992096 - Implement Sub Resource Integrity [1/2]. r=baku,r=ckerschb (c30671ac0) - Bug 992096 - Implement Sub Resource Integrity [2/2]. r=ckerschb (0afc64d88) - Bug 1091883 - Added test, this is fixed by a fix to bug 1113438. r=sstamm CLOSED TREE (fd9a64b43) - Bug 1196740 - Consider redirects when looking for SRI-eligibility. r=ckerschb (5c749cdc9) - Bug 1202015 - Better document the SRI strings for translators. r=ckerschb (a7860e0fb) - Bug 1202027 - Make SRI require CORS loads for cross-origin resources. r=ckerschb (ea451323d) - bit of Bug 1202902 - Mass replace toplevel 'let' with 'var' (a6e8a587d) - Bug 1208629 - Properly support data: and blob: URIs with an integrity atribute. r=ckerschb (6b2018fe4) - Bug 1140129 - Don't clear tab title when location changes (r=Mossop) (ca1945ba8) - Bug 1073462: Send synthetic property with Content:LocationChange message. r=felipe (1aa418acf) - bug 1165017 - annotate content process URL on location change. r=mconley (cdca4fa75) - Bug 1157561 - Add webRequest-like API to Firefox (r=Mossop) (546a57822) - Bug 1163861 - Include windowID in all WebRequest notifications (r=Mossop) (c140af560) - Bug 1171248 - Add MatchPattern support to WebRequest module (r=Mossop) (b09a05658)
101 lines
4.0 KiB
HTML
101 lines
4.0 KiB
HTML
<!DOCTYPE HTML>
|
|
<!-- Any copyright is dedicated to the Public Domain.
|
|
http://creativecommons.org/publicdomain/zero/1.0/ -->
|
|
<html>
|
|
<head>
|
|
<script type="application/javascript" src="/tests/SimpleTest/SimpleTest.js"></script>
|
|
<link rel="stylesheet" type="text/css" href="/tests/SimpleTest/test.css"/>
|
|
<script type="application/javascript">
|
|
function check_styles() {
|
|
var redText = document.getElementById('red-text');
|
|
var blackText = document.getElementById('black-text');
|
|
var redTextColor = window.getComputedStyle(redText, null).getPropertyValue('color');
|
|
var blackTextColor = window.getComputedStyle(blackText, null).getPropertyValue('color');
|
|
ok(redTextColor == 'rgb(255, 0, 0)', "The first part should be red.");
|
|
todo(blackTextColor == 'rgb(0, 0, 0)', "The second part should still be black.");
|
|
}
|
|
|
|
SimpleTest.waitForExplicitFinish();
|
|
window.onload = function() {
|
|
check_styles();
|
|
SimpleTest.finish();
|
|
}
|
|
</script>
|
|
<script>
|
|
function good_correctHashCORSLoaded() {
|
|
ok(true, "A CORS cross-domain stylesheet with correct hash was correctly loaded.");
|
|
}
|
|
function bad_correctHashCORSBlocked() {
|
|
ok(false, "We should load CORS cross-domain stylesheets with hashes that match!");
|
|
}
|
|
function good_correctHashBlocked() {
|
|
ok(true, "A non-CORS cross-domain stylesheet with correct hash was correctly blocked.");
|
|
}
|
|
function bad_correctHashLoaded() {
|
|
ok(false, "We should block non-CORS cross-domain stylesheets with hashes that match!");
|
|
}
|
|
|
|
function good_incorrectHashBlocked() {
|
|
ok(true, "A non-CORS cross-domain stylesheet with incorrect hash was correctly blocked.");
|
|
}
|
|
function bad_incorrectHashLoaded() {
|
|
ok(false, "We should load non-CORS cross-domain stylesheets with incorrect hashes!");
|
|
}
|
|
|
|
function good_correctDataBlocked() {
|
|
ok(true, "A stylesheet was correctly blocked, because it came from a data: URI.");
|
|
}
|
|
function bad_correctDataLoaded() {
|
|
ok(false, "We should not load stylesheets in data: URIs!");
|
|
}
|
|
function good_correctDataCORSBlocked() {
|
|
ok(true, "A stylesheet was correctly blocked, because it came from a data: URI even though it was a CORS load.");
|
|
}
|
|
function bad_correctDataCORSLoaded() {
|
|
todo(false, "We should not load stylesheets in data: URIs regardless of CORS mode!");
|
|
}
|
|
</script>
|
|
|
|
<!-- valid CORS sha256 hash -->
|
|
<link rel="stylesheet" href="http://example.com/tests/dom/security/test/sri/style1.css"
|
|
crossorigin="anonymous"
|
|
integrity="sha256-qs8lnkunWoVldk5d5E+652yth4VTSHohlBKQvvgGwa8="
|
|
onerror="bad_correctHashCORSBlocked()"
|
|
onload="good_correctHashCORSLoaded()">
|
|
|
|
<!-- valid non-CORS sha256 hash -->
|
|
<link rel="stylesheet" href="style_301.css"
|
|
integrity="sha256-qs8lnkunWoVldk5d5E+652yth4VTSHohlBKQvvgGwa8="
|
|
onerror="good_correctHashBlocked()"
|
|
onload="bad_correctHashLoaded()">
|
|
|
|
<!-- invalid non-CORS sha256 hash -->
|
|
<link rel="stylesheet" href="style_301.css?again"
|
|
integrity="sha256-bogus"
|
|
onerror="good_incorrectHashBlocked()"
|
|
onload="bad_incorrectHashLoaded()">
|
|
|
|
<!-- valid non-CORS sha256 hash in a data: URL -->
|
|
<link rel="stylesheet" href="data:text/css,.red-text{color:red}"
|
|
integrity="sha256-ewUcnAs4+XY5k2JpfUQGFdG5YMZkq80/nIKW67kd7vE="
|
|
onerror="good_correctDataBlocked()"
|
|
onload="bad_correctDataLoaded()">
|
|
|
|
<!-- valid CORS sha256 hash in a data: URL -->
|
|
<link rel="stylesheet" href="data:text/css,.red-text{color:red}"
|
|
crossorigin="anonymous"
|
|
integrity="sha256-ewUcnAs4+XY5k2JpfUQGFdG5YMZkq80/nIKW67kd7vE="
|
|
onerror="good_correctDataCORSBlocked()"
|
|
onload="bad_correctDataCORSLoaded()">
|
|
</head>
|
|
<body>
|
|
<p><span id="red-text">This should be red</span> but
|
|
<span id="black-text" class="red-text">this should remain black.</span></p>
|
|
<p id="display"></p>
|
|
<div id="content" style="display: none">
|
|
</div>
|
|
<pre id="test">
|
|
</pre>
|
|
</body>
|
|
</html>
|