| Pass | Reading 'nonce' content attribute and IDL attribute. | Asserts run| Pass | assert_equals(Element node <script nonce="abc" id="testScript" executed="yay"> doc..., Element node <script nonce="abc" id="testScript" executed="yay"> doc...)
at Test.<anonymous> ( /content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:18:7) | | Pass | assert_equals(null, null)
at Test.<anonymous> ( /content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:19:7) | | Pass | assert_equals(Element node <script nonce="abc" id="testScript" executed="yay"> doc..., Element node <script nonce="abc" id="testScript" executed="yay"> doc...)
at Test.<anonymous> ( /content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:20:7) | | Pass | assert_equals("abc", "abc")
at Test.<anonymous> ( /content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:22:7) | | Pass | assert_equals("abc", "abc")
at Test.<anonymous> ( /content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:23:7) |
|
| Pass | Cloned node retains nonce. | Asserts run| Pass | assert_equals("abc", "abc", "IDL attribute")
at Test.<anonymous> ( /content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:30:7) | | Pass | assert_equals("abc", "abc")
at Test.<anonymous> ( /content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:31:7) |
|
| Pass | Cloned node retains nonce when inserted. | Asserts run| Pass | assert_equals("abc", "abc")
at Test.<anonymous> ( /content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:37:7) | | Pass | assert_equals("abc", "abc")
at Test.<anonymous> ( /content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:38:7) | | Pass | assert_equals("boo", "boo")
at Test.<anonymous> ( /content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:41:9) |
|
| Pass | Writing 'nonce' content attribute. | Asserts run| Pass | assert_equals("foo", "foo")
at Test.<anonymous> ( /content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:48:7) | | Pass | assert_equals("foo", "foo")
at Test.<anonymous> ( /content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:49:7) |
|
| Pass | Writing 'nonce' IDL attribute. | Asserts run| Pass | assert_equals("bar", "bar")
at Test.<anonymous> ( /content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:55:7) | | Pass | assert_equals("foo", "foo")
at Test.<anonymous> ( /content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:56:7) |
|
| Pass | Document-written script executes. | Asserts runNo asserts ran |
| Pass | Document-written script's nonce value. | Asserts run| Pass | assert_equals("abc", "abc")
at Test.<anonymous> (<anonymous>:5:9) | | Pass | assert_equals("abc", "abc")
at Test.<anonymous> (<anonymous>:6:9) |
|
| Pass | createElement.nonce. | Asserts run| Pass | assert_equals("abc", "abc")
at Test.<anonymous> ( /content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:75:7) | | Pass | assert_equals(null, null)
at Test.<anonymous> ( /content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:76:7) | | Pass | assert_equals("abc", "abc")
at Test.<anonymous> ( /content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:78:7) | | Pass | assert_equals(null, null)
at Test.<anonymous> ( /content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:79:7) | | Pass | assert_equals("yay", "yay")
at Test.<anonymous> ( /content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:82:9) |
|
| Pass | setAttribute('nonce') overwrites '.nonce' upon insertion. | Asserts run| Pass | assert_equals("abc", "abc")
at Test.<anonymous> ( /content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:91:7) | | Pass | assert_equals("abc", "abc")
at Test.<anonymous> ( /content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:93:7) | | Pass | assert_equals("abc", "abc")
at Test.<anonymous> ( /content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:94:7) | | Pass | assert_equals("yay", "yay")
at Test.<anonymous> ( /content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:97:9) |
|
| Pass | createElement.setAttribute. | Asserts run| Pass | assert_equals("abc", "abc", "Pre-insertion content")
at Test.<anonymous> ( /content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:106:7) | | Pass | assert_equals("abc", "abc", "Pre-insertion IDL")
at Test.<anonymous> ( /content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:107:7) | | Pass | assert_equals("abc", "abc", "Post-insertion IDL")
at Test.<anonymous> ( /content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:109:7) | | Pass | assert_equals("abc", "abc", "Post-insertion content")
at Test.<anonymous> ( /content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:110:7) | | Pass | assert_equals("yay", "yay")
at Test.<anonymous> ( /content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:113:9) |
|
| Fail | Nonces leak via CSS side-channels. | assert_equals: expected "url(\"http://wpt.live:80/security/resources/abe.png\")" but got "url(\"https://xn--n8j6ds53lwwkrqhv28a.wpt.live/security/resources/abe.png\")" at Test.<anonymous> (https://xn--n8j6ds53lwwkrqhv28a.wpt.live/content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:129:7)
at Test.step (https://xn--n8j6ds53lwwkrqhv28a.wpt.live/resources/testharness.js:2642:25)
at test (https://xn--n8j6ds53lwwkrqhv28a.wpt.live/resources/testharness.js:633:30)
at https://xn--n8j6ds53lwwkrqhv28a.wpt.live/content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:124:5Asserts run| Pass | assert_equals("block", "block")
at Test.<anonymous> ( /content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:128:7) | | Fail | assert_equals("url(\"https://xn--n8j6ds53lwwkrqhv28a.wpt.live/security/resources/abe.png\")", "url(\"http://wpt.live:80/security/resources/abe.png\")")
at Test.<anonymous> ( /content-security-policy/nonce-hiding/script-nonces-hidden-meta.sub.html:129:7) |
|