A report-only policy that does not allow a script should not affect an enforcing policy using hashes.

Summary

Harness status: OK

Found 2 tests

2 Pass

Details

Result

Test Name

Message

Pass

Should fire securitypolicyviolation event

Asserts run

Pass

assert_equals("script-src-elem", "script-src-elem")
    at Test.<anonymous> ( /content-security-policy/script-src/script-src-report-only-policy-works-with-external-hash-policy.html:13:7)

Pass

assert_equals("report", "report")
    at Test.<anonymous> ( /content-security-policy/script-src/script-src-report-only-policy-works-with-external-hash-policy.html:14:7)

Pass

External script in a script tag with matching SRI hash should run.

Asserts run

Pass	assert_true(true, "External script ran.") at Test.<anonymous> ( /content-security-policy/script-src/script-src-report-only-policy-works-with-external-hash-policy.html:22:7)