Source code

Revision control

Copy as Markdown

Other Tools

<!DOCTYPE HTML>
<html>
<head>
<title>Bug 1457100: Test OBJECT inherits CSP if needed</title>
<meta charset="utf-8">
<meta http-equiv="Content-Security-Policy" content= "img-src https://bug1457100.test.com"/>
</head>
<body>
<object id="dataObject" data="data:text/html,object<script>var foo = 0;</script>"></object>
<script type="application/javascript">
var dataObject = document.getElementById("dataObject");
dataObject.onload = function () {
var contentDoc = SpecialPowers.wrap(dataObject).contentDocument;
var cspJSON = contentDoc.cspJSON;
window.parent.postMessage({cspJSON}, "*");
}
</script>
</body>
</html>