Source code
Revision control
Copy as Markdown
Other Tools
Test Info:
- This WPT test may be referenced by the following Test IDs:
- /content-security-policy/img-src/img-src-wildcard-allowed.html - WPT Dashboard Interop Dashboard
<!DOCTYPE html>
<meta http-equiv="Content-Security-Policy" content="img-src *;">
<html>
<head>
<title>img element src attribute must match src list.</title>
<script src='/resources/testharness.js'></script>
<script src='/resources/testharnessreport.js'></script>
</head>
<body>
<div id='log'></div>
<script>
var t1 = async_test("img-src with wildcard should match all");
</script>
<img src='/content-security-policy/support/pass.png'
onload='t1.done();'
onerror='t1.step(function() { assert_unreached("Image should have loaded"); t1.done(); });'>
<script>
async_test(function(t) {
var pngBase64 = "iVBORw0KGgoAAAANSUhEUgAAAGQAAABkCAIAAAD/gAIDAAAACXBIWXMAAAsTAAALEwEAmpwYAAAAnklEQVR42u3QMQEAAAgDoGlyo1vBzwciUJlw1ApkyZIlS5YsBbJkyZIlS5YCWbJkyZIlS4EsWbJkyZKlQJYsWbJkyVIgS5YsWbJkKZAlS5YsWbIUyJIlS5YsWQpkyZIlS5YsBbJkyZIlS5YCWbJkyZIlS4EsWbJkyZKlQJYsWbJkyVIgS5YsWbJkKZAlS5YsWbIUyJIlS5YsWQpkyfq2MosBSIeKONMAAAAASUVORK5CYII=";
blobContents = [atob(pngBase64)];
blob = new Blob(blobContents, {type: "image/png"});
img = document.createElement("img");
img.onerror = function (e) {
t.done();
};
img.onload = function () {
assert_unreached("Should not load blob img");
t.done();
};
blobURL = window.URL.createObjectURL(blob);
img.src = blobURL;
},"img-src with wildcard should not match blob");
</script>
</body>
</html>