304-response-should-update-csp.sub.html

Enable keyboard shortcuts

This WPT test may be referenced by the following Test IDs:
- /content-security-policy/generic/304-response-should-update-csp.sub.html - WPT Dashboard Interop Dashboard

<!DOCTYPE HTML>

<html>

<head>

    <script src='/resources/testharness.js'></script>

    <script src='/resources/testharnessreport.js'></script>

    <title>Test that a 304 response will update the CSP header</title>

</head>

<body>

  <script>

    var t1 = async_test("Test that the first frame uses nonce abc");

    var t2 = async_test("Test that the first frame does not use nonce def");

    var t3 = async_test("Test that the second frame uses nonce def");

    var t4 = async_test("Test that the second frame does not use nonce abc");

    var i1 = document.createElement('iframe');

    // We add a random parameter to avoid previous tests cached requests.

    // We want to make sure i1 gets a 200 code and i2 gets a 304 code.

    i1.src = "support/304-response.py?{{$id:uuid()}}";

    var i2 = document.createElement('iframe');

    i2.src = "support/304-response.py?{{$id}}";

    var load_second_frame = function() {

      document.body.appendChild(i2);

    window.onmessage = function(e) {

      if (e.source == i1.contentWindow) {

        if (e.data == "abc_executed") { t1.done(); return; }

        if (e.data == "script-src 'nonce-abc' 'sha256-IIB78ZS1RMMrAWpsLg/RrDbVPhI14rKm3sFOeKPYulw='") { t2.done(); return; }

        t1.step(function() { assert_unreached("Unexpected message received"); });

        t2.step(function() { assert_unreached("Unexpected message received"); });

      if (e.source == i2.contentWindow) {

        if (e.data == "def_executed") { t3.done(); return; }

        if (e.data == "script-src 'nonce-def' 'sha256-IIB78ZS1RMMrAWpsLg/RrDbVPhI14rKm3sFOeKPYulw='") { t4.done(); return; }

        t3.step(function() { assert_unreached("Unexpected message received"); });

        t4.step(function() { assert_unreached("Unexpected message received"); });

};

    i1.onload = load_second_frame;

    document.body.appendChild(i1);

  </script>

</body>

</html>