1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/content/base/test/csp/file_multi_policy_injection_bypass.html Wed Dec 31 06:09:35 2014 +0100 1.3 @@ -0,0 +1,15 @@ 1.4 +<html> 1.5 +<!-- 1.6 +https://bugzilla.mozilla.org/show_bug.cgi?id=717511 1.7 +--> 1.8 + <body> 1.9 + <!-- these should be stopped by CSP after fixing bug 717511. :) --> 1.10 + <img src="http://example.org/tests/content/base/test/file_CSP.sjs?testid=img_bad&type=img/png"> </img> 1.11 + <script src='http://example.org/tests/content/base/test/file_CSP.sjs?testid=script_bad&type=text/javascript'></script> 1.12 + 1.13 + <!-- these should load ok after fixing bug 717511. :) --> 1.14 + <img src="file_CSP.sjs?testid=img_good&type=img/png" /> 1.15 + <script src='file_CSP.sjs?testid=script_good&type=text/javascript'></script> 1.16 + 1.17 + </body> 1.18 +</html>