blob: 8211d0847a8ef97c0177353ab8308a8b0b0d9a60 [file] [log] [blame]
<!DOCTYPE html>
<html>
<head>
<!-- Programmatically converted from a WebKit Reftest, please forgive resulting idiosyncracies.-->
<meta http-equiv="Content-Security-Policy" content="frame-src 'none'; object-src 'none'; script-src 'self' 'unsafe-inline'; connect-src 'self';">
<title>frame-src-about-blank-allowed-by-default</title>
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
<script src='../support/logTest.sub.js?logs=["PASS"]'></script>
<script src="../support/alertAssert.sub.js?alerts=[]"></script>
<p>These frames should not be blocked by Content-Security-Policy.
It&apos;s pointless to block about:blank iframes because
blocking a frame just results in displaying about:blank anyway!
</p>
<script>
window.addEventListener('securitypolicyviolation', function(e) {
log("Fail");
});
</script>
<iframe src="about:blank"></iframe>
<object type="text/html" data="about:blank"></object>
<div id="log"></div>
<script>
log("PASS");
</script>
</body>
</html>