Source code
Revision control
Copy as Markdown
Other Tools
Test Info:
- This WPT test may be referenced by the following Test IDs:
- /content-security-policy/child-src/child-src-about-blank-allowed-by-default.sub.html - WPT Dashboard Interop Dashboard
<!DOCTYPE html>
<html>
<head>
<!-- Programmatically converted from a WebKit Reftest, please forgive resulting idiosyncracies.-->
<meta http-equiv="Content-Security-Policy" content="child-src 'none'; object-src 'none'; script-src 'self' 'unsafe-inline'; connect-src 'self';">
<title>child-src-about-blank-allowed-by-default</title>
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
<p>These frames should not be blocked by Content-Security-Policy.
It's pointless to block about:blank iframes because
blocking a frame just results in displaying about:blank anyway!
</p>
<script>
var t = async_test("Check that frames load without throwing any violation events");
window.addEventListener("securitypolicyviolation", t.unreached_func("Should not have fired any events"));
</script>
<iframe src="about:blank"></iframe>
<object type="text/html" data="about:blank"></object>
<div id="log"></div>
<script>
t.done();
</script>
</body>
</html>