The origin of an URL is called "unique" when it is considered to be different from every origin, including itself. The origin of a data-url is unique. When the current origin is unique, the CSP source 'self' must not match any URL.
Harness status: OK
Found 1 tests
Result | Test Name | Message |
---|---|---|
Pass | Iframe's url must not match with 'self'. It must be blocked. | Asserts runNo asserts ran |