Source code
Revision control
Copy as Markdown
Other Tools
Test Info:
- This WPT test may be referenced by the following Test IDs:
- /content-security-policy/script-src/hash-always-converted-to-utf-8/utf-8-lone-surrogate.html - WPT Dashboard Interop Dashboard
<html>
<head>
<meta http-equiv="Content-Security-Policy" content="script-src 'self' 'nonce-abc' 'sha256-YJSaNEZFStZqU2Mp2EttwhcP2aT9lnDvexn+BM2HfKo=';">
<script src='/resources/testharness.js'></script>
<script src='/resources/testharnessreport.js'></script>
</head>
<body>
<script nonce="abc">
var t = async_test("Should convert the script contents to UTF-8 before hashing");
var count = 0;
var script_ran = function() {
// if both blocks run the tests is succsssful
if (++count == 2) t.done();
}
window.addEventListener("securitypolicyviolation", t.unreached_func("Should not have fired a spv"));
// Insert a script element that contains the U+FFFD replacement character
var scr1 = document.createElement('script');
scr1.text ="//\uFFFD\nscript_ran();";
document.body.appendChild(scr1);
// Insert a script element that contains a surrogate character but it otherwise
// entirely identical to the previously inserted one, the surrogate should be
// be converted to U+FFFD when converting to UTF-8 so it should have the
// same hash as the one inserted before
var scr2 = document.createElement('script');
scr2.text ="//\uD801\nscript_ran();";
document.body.appendChild(scr2);
</script>
</body>
</html>