Source code
Revision control
Copy as Markdown
Other Tools
Test Info:
- This WPT test may be referenced by the following Test IDs:
- /content-security-policy/frame-src/frame-src-about-blank-allowed-by-default.sub.html - WPT Dashboard Interop Dashboard
<!DOCTYPE html>
<html>
<head>
<!-- Programmatically converted from a WebKit Reftest, please forgive resulting idiosyncracies.-->
<meta http-equiv="Content-Security-Policy" content="frame-src 'none'; object-src 'none'; script-src 'self' 'unsafe-inline'; connect-src 'self';">
<title>frame-src-about-blank-allowed-by-default</title>
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
<script src='../support/logTest.sub.js?logs=["PASS"]'></script>
<script src="../support/alertAssert.sub.js?alerts=[]"></script>
<p>These frames should not be blocked by Content-Security-Policy.
It's pointless to block about:blank iframes because
blocking a frame just results in displaying about:blank anyway!
</p>
<script>
window.addEventListener('securitypolicyviolation', function(e) {
log("Fail");
});
</script>
<iframe src="about:blank"></iframe>
<object type="text/html" data="about:blank"></object>
<div id="log"></div>
<script>
log("PASS");
</script>
</body>
</html>