Quelle test_bug885433.html

Sprache: HTML

products/Sources/formale Sprachen/C/Firefox/dom/security/test/csp/test_bug885433.html

<!DOCTYPE HTML>
<html>
<head>
  <title>Test for Content Security Policy inline stylesheets stuff</title>
  <script src="/tests/SimpleTest/SimpleTest.js"></script>
  <link rel="stylesheet" type="text/css" href="/tests/SimpleTest/test.css" />
</head>
<body>
<p id="display"></p>
<div id="content" style="display: none">
</div>

<iframe style="width:100%;" id='cspframe'></iframe>
<iframe style="width:100%;" id='cspframe2'></iframe>
<script class="testbody" type="text/javascript">

//////////////////////////////////////////////////////////////////////
// set up and go
SimpleTest.waitForExplicitFinish();

// utilities for check functions
// black means the style wasn't applied, applied styles are green
var green = 'rgb(0, 128, 0)';
var black = 'rgb(0, 0, 0)';

// We test both script and style execution by observing changes in computed styles
function checkAllowed () {
  var cspframe = document.getElementById('cspframe');
  var color;

  color = window.getComputedStyle(cspframe.contentDocument.getElementById('unsafe-inline-script-allowed')).color;
  ok(color === green, "Inline script should be allowed");
  color = window.getComputedStyle(cspframe.contentDocument.getElementById('unsafe-eval-script-allowed')).color;
  ok(color === green, "Eval should be allowed");
  color = window.getComputedStyle(cspframe.contentDocument.getElementById('unsafe-inline-style-allowed')).color;
  ok(color === green, "Inline style should be allowed");

  document.getElementById('cspframe2').src = 'file_bug885433_blocks.html';
  document.getElementById('cspframe2').addEventListener('load', checkBlocked);
}

function checkBlocked () {
  var cspframe = document.getElementById('cspframe2');
  var color;

  color = window.getComputedStyle(cspframe.contentDocument.getElementById('unsafe-inline-script-blocked')).color;
  ok(color === black, "Inline script should be blocked");
  color = window.getComputedStyle(cspframe.contentDocument.getElementById('unsafe-eval-script-blocked')).color;
  ok(color === black, "Eval should be blocked");
  color = window.getComputedStyle(cspframe.contentDocument.getElementById('unsafe-inline-style-blocked')).color;
  ok(color === black, "Inline style should be blocked");

  SimpleTest.finish();
}

document.getElementById('cspframe').src = 'file_bug885433_allows.html';
document.getElementById('cspframe').addEventListener('load', checkAllowed);
</script>
</pre>
</body>
</html>

Messung V0.5 in Prozent

¤ Dauer der Verarbeitung: 0.17 Sekunden (vorverarbeitet am 2026-06-10) ¤

Wurzel

Suchen

PVS Prover

Isabelle Prover

NIST Cobol Testsuite

Cephes Mathematical Library

Vienna Development Method

Haftungshinweis

Die Informationen auf dieser Webseite wurden nach bestem Wissen sorgfältig zusammengestellt. Es wird jedoch weder Vollständigkeit, noch Richtigkeit, noch Qualität der bereit gestellten Informationen zugesichert.

Bemerkung:

Die farbliche Syntaxdarstellung und die Messung sind noch experimentell.