file_nonce_redirects.html

Enable keyboard shortcuts

<!DOCTYPE HTML>

<html>

  <head>

  <meta charset='utf-8'>

  <meta http-equiv="Content-Security-Policy" content="script-src 'nonce-abcd1234'">

  <title>Bug 1469150:Scripts with valid nonce get blocked if URL redirects</title>

  </head>

<body>

<script nonce='abcd1234' id='redirectScript'></script>

<script nonce='abcd1234' type='application/javascript'>

  var redirectScript = document.getElementById('redirectScript');

  redirectScript.onload = function(e) {

    window.parent.postMessage({result: 'script-loaded'}, '*');

};

  redirectScript.onerror = function(e) {

    window.parent.postMessage({result: 'script-blocked'}, '*');

  redirectScript.src = 'file_nonce_redirector.sjs?redirect';

</script>

</body>

</html>