Parser-inserted scripts without a correct nonce are not allowed with `strict-dynamic` in the script-src directive.

Summary

Harness status: OK

Found 10 tests

Details

ResultTest NameMessage
PassParser-inserted script via `document.write` without a correct nonce is not allowed with `strict-dynamic`.
Asserts run
Pass
assert_equals("script-src-elem", "script-src-elem")
    at Test.<anonymous> ( /content-security-policy/script-src/script-src-strict_dynamic_parser_inserted.html:27:17)
PassParser-inserted script via `document.writeln` without a correct nonce is not allowed with `strict-dynamic`.
Asserts run
Pass
assert_equals("script-src-elem", "script-src-elem")
    at Test.<anonymous> ( /content-security-policy/script-src/script-src-strict_dynamic_parser_inserted.html:46:17)
PassParser-inserted deferred script via `document.write` without a correct nonce is not allowed with `strict-dynamic`.
Asserts run
Pass
assert_equals("script-src-elem", "script-src-elem")
    at Test.<anonymous> ( /content-security-policy/script-src/script-src-strict_dynamic_parser_inserted.html:65:17)
PassParser-inserted deferred script via `document.writeln` without a correct nonce is not allowed with `strict-dynamic`.
Asserts run
Pass
assert_equals("script-src-elem", "script-src-elem")
    at Test.<anonymous> ( /content-security-policy/script-src/script-src-strict_dynamic_parser_inserted.html:84:17)
PassParser-inserted async script via `document.write` without a correct nonce is not allowed with `strict-dynamic`.
Asserts run
Pass
assert_equals("script-src-elem", "script-src-elem")
    at Test.<anonymous> ( /content-security-policy/script-src/script-src-strict_dynamic_parser_inserted.html:103:17)
PassParser-inserted async script via `document.writeln` without a correct nonce is not allowed with `strict-dynamic`.
Asserts run
Pass
assert_equals("script-src-elem", "script-src-elem")
    at Test.<anonymous> ( /content-security-policy/script-src/script-src-strict_dynamic_parser_inserted.html:122:17)
PassParser-inserted deferred async script via `document.write` without a correct nonce is not allowed with `strict-dynamic`.
Asserts run
Pass
assert_equals("script-src-elem", "script-src-elem")
    at Test.<anonymous> ( /content-security-policy/script-src/script-src-strict_dynamic_parser_inserted.html:141:17)
PassParser-inserted deferred async script via `document.writeln` without a correct nonce is not allowed with `strict-dynamic`.
Asserts run
Pass
assert_equals("script-src-elem", "script-src-elem")
    at Test.<anonymous> ( /content-security-policy/script-src/script-src-strict_dynamic_parser_inserted.html:160:17)
PassScript injected via `innerHTML` is not allowed with `strict-dynamic`.
Asserts run
Pass
assert_false(false)
    at Test.<anonymous> ( /content-security-policy/script-src/script-src-strict_dynamic_parser_inserted.html:175:17)
Pass
assert_equals("script-src-attr", "script-src-attr")
    at Test.<anonymous> ( /content-security-policy/script-src/script-src-strict_dynamic_parser_inserted.html:176:17)
PassScript injected via `insertAdjacentHTML` is not allowed with `strict-dynamic`.
Asserts run
Pass
assert_false(false)
    at Test.<anonymous> ( /content-security-policy/script-src/script-src-strict_dynamic_parser_inserted.html:193:17)
Pass
assert_equals("script-src-attr", "script-src-attr")
    at Test.<anonymous> ( /content-security-policy/script-src/script-src-strict_dynamic_parser_inserted.html:194:17)