| img-html-correctly-labeled.sub-ref.html |
|
153 |
- |
| img-html-correctly-labeled.sub.html |
|
668 |
- |
| img-mime-types-coverage.tentative.sub.html |
|
3435 |
- |
| img-png-mislabeled-as-html-nosniff.tentative.sub-ref.html |
|
150 |
- |
| img-png-mislabeled-as-html-nosniff.tentative.sub.html |
|
641 |
- |
| img-png-mislabeled-as-html.sub-ref.html |
|
151 |
- |
| img-png-mislabeled-as-html.sub.html |
|
524 |
- |
| img-svg-doctype-html-mimetype-empty.sub.html |
|
347 |
- |
| img-svg-doctype-html-mimetype-svg.sub.html |
|
436 |
- |
| img-svg-invalid.sub-ref.html |
|
181 |
- |
| img-svg-labeled-as-dash.sub.html |
|
319 |
- |
| img-svg-labeled-as-svg-xml.sub.html |
|
313 |
- |
| img-svg-xml-decl.sub.html |
|
288 |
- |
| img-svg.sub-ref.html |
|
205 |
- |
| preload-image-png-mislabeled-as-html-nosniff.tentative.sub.html |
|
899 |
- |
| README.md |
# Tests related to Cross-Origin Resource Blocking (CORB). |
3003 |
- |
| resources |
|
|
- |
| response_block.tentative.https.html |
|
1883 |
- |
| script-html-correctly-labeled.tentative.sub.html |
|
1295 |
- |
| script-html-js-polyglot.sub.html |
|
1176 |
- |
| script-html-via-cross-origin-blob-url.sub.html |
|
1439 |
- |
| script-js-mislabeled-as-html-nosniff.sub.html |
|
1095 |
- |
| script-js-mislabeled-as-html.sub.html |
|
806 |
- |
| script-resource-with-json-parser-breaker.tentative.sub.html |
|
3417 |
- |
| script-resource-with-nonsniffable-types.tentative.sub.html |
|
2702 |
- |
| style-css-mislabeled-as-html-nosniff.sub.html |
CSS is not applied (because of nosniff + non-text/css headers) |
1552 |
- |
| style-css-mislabeled-as-html.sub.html |
CSS is not applied (because of strict content-type enforcement for cross-origin stylesheets) |
1381 |
- |
| style-css-with-json-parser-breaker.sub.html |
CORB doesn't block a stylesheet that has a proper Content-Type and begins with a JSON parser breaker |
1502 |
- |
| style-html-correctly-labeled.sub.html |
CSS is not applied (because of mismatched Content-Type header) |
1700 |
- |
| WEB_FEATURES.yml |
|
38 |
- |