Thu, 22 Jan 2015 13:21:57 +0100
Incorporate requested changes from Mozilla in review:
https://bugzilla.mozilla.org/show_bug.cgi?id=1123480#c6
1 <html>
2 <head> <meta charset="utf-8"> </head>
3 <body>
5 <!-- this should be allowed (no CSP)-->
6 <img src="http://example.org/tests/content/base/test/csp/file_CSP.sjs?testid=img_good&type=img/png"> </img>
9 <script type="text/javascript">
10 var req = new XMLHttpRequest();
11 req.onload = function() {
12 //this should be allowed (no CSP)
13 try {
14 var img = document.createElement("img");
15 img.src="http://example.org/tests/content/base/test/csp/file_CSP.sjs?testid=img2_good&type=img/png";
16 document.body.appendChild(img);
17 } catch(e) {
18 console.log("yo: "+e);
19 }
20 };
21 req.open("get", "file_CSP_bug941404_xhr.html", true);
22 req.responseType = "document";
23 req.send();
24 </script>
26 </body>
27 </html>