1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000
1.2 +++ b/content/base/test/csp/file_bug886164.html Wed Dec 31 06:09:35 2014 +0100
1.3 @@ -0,0 +1,15 @@
1.4 +<html>
1.5 +<head> <meta charset="utf-8"> </head>
1.6 + <body>
1.7 + <!-- sandbox="allow-same-origin" -->
1.8 + <!-- Content-Security-Policy: default-src 'self' -->
1.9 +
1.10 + <!-- these should be stopped by CSP -->
1.11 + <img src="http://example.org/tests/content/base/test/csp/file_CSP.sjs?testid=img_bad&type=img/png"> </img>
1.12 +
1.13 + <!-- these should load ok -->
1.14 + <img src="/tests/content/base/test/csp/file_CSP.sjs?testid=img_good&type=img/png" />
1.15 + <script src='/tests/content/base/test/csp/file_CSP.sjs?testid=scripta_bad&type=text/javascript'></script>
1.16 +
1.17 + </body>
1.18 +</html>
