test_bug1505412.html

Enable keyboard shortcuts

<!DOCTYPE HTML>

<html>

<head>

    <title> Bug 1505412 CSP-RO reports violations in inline-scripts with nonce</title>

    <script src="/tests/SimpleTest/SimpleTest.js" nonce="foobar"></script>

    <link rel="stylesheet" type="text/css" href="/tests/SimpleTest/test.css" />

<body>

    <p id="display"></p>

    <div id="content" style="display: none">

    </div>

    <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=1505412">Test for 1505412 </a>

    <script class="testbody" type="text/javascript" nonce="foobar">

        /* Description of the test:

            1:  We setup a Proxy that will cause the Test to Fail

                if Firefox sends a CSP-Report to /report

            2:  We Load an iframe with has a Script pointing to

                file_bug1505412.sjs

            3:  The Preloader will fetch the file and Gets redirected

            4:  If correct, the File should be loaded and no CSP-Report

                should be send.

*/

        SimpleTest.waitForExplicitFinish();

        SimpleTest.requestCompleteLog();

        SimpleTest.requestLongerTimeout(2); // Or might fail for Linux-Debug in some cases.

        var script;

       window.addEventListener("load",()=>{

        let t = document.querySelector("#target");

        t.src = "file_bug1505412_frame.html";

        t.addEventListener("load",async  () => {

            let reportCount = await fetch("file_bug1505412_reporter.sjs?state").then(r => r.text());

            info(reportCount);

            ok(reportCount == 0 , "Script Loaded without CSP beeing triggered");

            await fetch("file_bug1505412_reporter.sjs?flush");

            SimpleTest.finish();

});

})

    </script>

    <iframe id="target" frameborder="0"></iframe>

</body>

</html>