unsandboxed-blob-scheme.html

mozilla-central/testing/web-platform/tests/content-security-policy/inheritance/unsandboxed-blob-scheme.html

Enable keyboard shortcuts

Source code

File a bug in Core :: DOM: Security

Revision control

Copy as Markdown

Other Tools

Test Info: Warnings

This test has a WPT meta file that expects 1 subtest issues.
This WPT test may be referenced by the following Test IDs:
- /content-security-policy/inheritance/unsandboxed-blob-scheme.html - WPT Dashboard Interop Dashboard

<!DOCTYPE html>

<html>

<head>

    <script nonce="abc" src="/resources/testharness.js"></script>

    <script nonce="abc" src="/resources/testharnessreport.js"></script>

</head>

<body>

    <script nonce='abc'>

      var blob_string = "<script>alert(document.domain)<\/scr"+"ipt>";

      var blob = new Blob([blob_string], {type : 'text/html'});

      var url = URL.createObjectURL(blob);

      var i = document.createElement('iframe');

      i.src = url;

      document.body.appendChild(i);

    </script>

    <script nonce='abc' async defer src='../support/checkReport.sub.js?reportField=violated-directive&reportValue=script-src%20%27nonce-abc%27'></script>

</body>

</html>