multiple-report-policies.html

mozilla-central/testing/web-platform/tests/content-security-policy/reporting/multiple-report-policies.html

Enable keyboard shortcuts

Source code

File a bug in Core :: DOM: Security

Revision control

Copy as Markdown

Other Tools

Test Info: Warnings

This test has a WPT meta file that disables it given conditions:
- os == "linux" : https://bugzilla.mozilla.org/show_bug.cgi?id=1435526
- debug and (os == "win") : https://bugzilla.mozilla.org/show_bug.cgi?id=1435526
This test has a WPT meta file that expects 1 subtest issues.
This WPT test may be referenced by the following Test IDs:
- /content-security-policy/reporting/multiple-report-policies.html - WPT Dashboard Interop Dashboard

<!DOCTYPE html>

<html>

<head>

    <script src="/resources/testharness.js"></script>

    <script src="/resources/testharnessreport.js"></script>

    <title>When multiple report-uri endpoints for multiple policies are specified, each gets a report</title>

    <!-- CSP headers

Content-Security-Policy-Report-Only: img-src http://* https://*; default-src 'self'; script-src 'self' 'unsafe-inline'; report-uri /reporting/resources/report.py?op=put&reportID={{$id}}

Content-Security-Policy-Report-Only: img-src http://*; default-src 'self'; script-src 'self' 'unsafe-inline'; report-uri /reporting/resources/report.py?op=put&reportID={{$id}}

-->

</head>

<body>

    <img src="ftp://blah.test" />

    <script async defer src='../support/checkReport.sub.js?reportField=violated-directive&reportValue=img-src%20http%3A%2F%2F%2A%20https%3A%2F%2F%2A&testName=1-Violation%20report%20status%20OK'></script>

    <script async defer src='../support/checkReport.sub.js?reportField=violated-directive&reportValue=img-src%20http%3A%2F%2F%2A&reportCookieName=multiple-report-policies-2&testName=2-Violation%20report%20status%20OK'></script>

</body>

</html>