blob: d36e1b9ed7e9b06a7e6cade21c9e622da5c1455f [file] [log] [blame]
<!doctype html>
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
<meta http-equiv="Content-Security-Policy" content="require-sri-for script; script-src 'self' 'unsafe-inline'">
<script>
var executed_test = async_test('Test that a worker can be created.');
var blob = URL.createObjectURL(new Blob(['importScripts("http://127.0.0.1:8000/security/contentSecurityPolicy/require-sri-for/sri-worker.js")']));
try {
var worker = new Worker(blob);
worker.onmessage = function(e){
executed_test.assert_unreached("This code block should not execute.");
};
} catch (e) {
assert_true(e.message.startsWith("Failed to construct 'Worker': Access to the script at 'blob:http://127.0.0.1:8000/"));
}
document.addEventListener('securitypolicyviolation', executed_test.unreached_func("No report should be generated"));
executed_test.done();
</script>