Source code
Revision control
Copy as Markdown
Other Tools
Test Info: Warnings
- This test has a WPT meta file that expects 1 subtest issues.
- This WPT test may be referenced by the following Test IDs:
- /content-security-policy/connect-src/connect-src-webtransport-allowed.sub.https.html - WPT Dashboard Interop Dashboard
<!DOCTYPE html>
<html>
<head>
<meta name="timeout" content="long">
<meta http-equiv="Content-Security-Policy" content="connect-src 'self' https://{{domains[www1]}}:{{ports[webtransport-h3][0]}}/webtransport/handlers/echo.py; script-src 'self' 'unsafe-inline';">
<title>connect-src-webtransport-allowed</title>
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
</head>
<script>
const url1 = "https://{{domains[www1]}}:{{ports[webtransport-h3][0]}}/webtransport/handlers/echo.py";
const url2 = url1.replace("www1", "www2");
const serverCertificateHashes = [
{algorithm: "sha-256", value: new Uint8Array(32)}
];
[
{url: url1, options: {}},
{url: url2, options: {}, expected: "connect-src"},
{url: url1, options: {serverCertificateHashes}, expected: "connect-src"},
].forEach(({url, options, expected}) => promise_test(async t => {
const haveViolation = new Promise(r => window.onsecuritypolicyviolation = r);
try {
const wt = new WebTransport(url, options);
t.add_cleanup(() => wt.close());
wt.closed.catch(() => {});
await wt.ready;
assert_equals(expected, undefined, "allowed");
} catch (e) {
if (e.name != "WebTransportError") throw e;
const timeout = new Promise(r => t.step_timeout(() => r({}), 1000));
const {violatedDirective} = await Promise.race([haveViolation, timeout]);
assert_equals(violatedDirective, expected);
}
}, `CSP connect-src url vs ${Object.keys(options)[0] || "WebTransport"}. Expecting ${expected}`));
</script>
</html>