Source code
Revision control
Copy as Markdown
Other Tools
Test Info:
- This WPT test may be referenced by the following Test IDs:
- /content-security-policy/securitypolicyviolation/targeting-for-inline-handler-connected-after-set.html - WPT Dashboard Interop Dashboard
<!doctype html>
<meta http-equiv="Content-Security-Policy" content="script-src 'nonce-abc'; style-src 'self'">
<script nonce="abc" src="/resources/testharness.js"></script>
<script nonce="abc" src="/resources/testharnessreport.js"></script>
<div id="parent"></div>
<script nonce="abc">
promise_test(async t => {
var d = document.createElement("div");
d.setAttribute("onclick", "void(0);");
document.getElementById('parent').appendChild(d);
const timeout_promise = () => new Promise((_, reject) => t.step_timeout(
() => reject(new Error('Timed out waiting for securitypolicyviolation')), 1000));
const get_failed_watchers = (results) => results.flatMap(
(r, i) => r.status !== "fulfilled" ? [ `#${i}: ${r.reason}` ] : []);
await Promise.allSettled([
Promise.race([new EventWatcher(t, document, ["securitypolicyviolation"])
.wait_for("securitypolicyviolation").then(t.step_func(e => {
assert_equals(e.blockedURI, "inline");
assert_equals(e.lineNumber, 10);
assert_in_array(e.columnNumber, [7, 19]);
assert_equals(e.target, d);
})),
timeout_promise()]),
Promise.race([new EventWatcher(t, d, ["securitypolicyviolation"])
.wait_for("securitypolicyviolation").then(t.step_func(e => {
assert_equals(e.blockedURI, "inline");
assert_equals(e.lineNumber, 10);
assert_in_array(e.columnNumber, [7, 19]);
assert_equals(e.target, d);
})),
timeout_promise()]),
]).then(t.step_func(results => {
assert_array_equals(get_failed_watchers(results), []);
}));
});
</script>