7.28content-security-policy/script-src/

129 / 165 WPT subtests passing

Failed
27
Timed out
5
Not run
4
Test files
84
Blocking files
21

Tests

1 directory, 78 test files here
DirectorySubtests passingTest filesStanding
hash-always-converted-to-utf-8/8 / 86none blocking
Test fileSubtests passingFailedStanding
audioworklet-eval-blocked.https.html0 / 11NONE-PASSED
audioworklet-trusted-types-eval-blocked.https.html0 / 11NONE-PASSED
eval-allowed-in-report-only-mode-and-sends-report.html1 / 21With failures
eval-allowed-in-report-only-mode.html1 / 10Clean
injected-inline-script-allowed.sub.html1 / 10Clean
injected-inline-script-blocked.sub.html1 / 10Clean
javascript-window-open-blocked.html0 / 10TIMEOUT
non-nonceable-elements.html1 / 109With failures
nonce-enforce-blocked.html0 / 11NONE-PASSED
nonce-with-trailing-characters-blocked.html1 / 10Clean
script-src-1_1.html2 / 30TIMEOUT
script-src-1_10.html2 / 20Clean
script-src-1_10_1.html2 / 20Clean
script-src-1_2.html2 / 30TIMEOUT
script-src-1_2_1.html2 / 20Clean
script-src-1_3.html2 / 20Clean
script-src-1_4.html0 / 32TIMEOUT
script-src-1_4_1.html2 / 30TIMEOUT
script-src-1_4_2.html0 / 21TIMEOUT
script-src-event-handler-on-inline-script.html4 / 40Clean
script-src-multiple-policies-multiple-hashing-algorithms.html1 / 10Clean
script-src-multiple-policies-one-using-hashing-algorithms.html1 / 10Clean
script-src-overrides-default-src.sub.html1 / 10Clean
script-src-report-only-policy-works-with-external-hash-policy.html2 / 20Clean
script-src-report-only-policy-works-with-hash-policy.html2 / 20Clean
script-src-sri_hash.sub.html12 / 120Clean
script-src-strict_dynamic_and_unsafe_eval_eval.html1 / 10Clean
script-src-strict_dynamic_and_unsafe_eval_new_function.html1 / 10Clean
script-src-strict_dynamic_discard_source_expressions.html1 / 10Clean
script-src-strict_dynamic_double_policy_different_nonce.html2 / 20Clean
script-src-strict_dynamic_double_policy_honor_source_expressions.sub.html2 / 20Clean
script-src-strict_dynamic_double_policy_report_only.html1 / 10Clean
script-src-strict_dynamic_eval.html0 / 11NONE-PASSED
script-src-strict_dynamic_hashes.html3 / 30Clean
script-src-strict_dynamic_in_img-src.html1 / 10Clean
script-src-strict_dynamic_javascript_uri.html0 / 10TIMEOUT
script-src-strict_dynamic_meta_tag.html4 / 40Clean
script-src-strict_dynamic_modulepreload_parser_inserted_module.html2 / 31With failures
script-src-strict_dynamic_new_function.html0 / 11NONE-PASSED
script-src-strict_dynamic_non_parser_inserted.html4 / 40Clean
script-src-strict_dynamic_non_parser_inserted_incorrect_nonce.html1 / 10Clean
script-src-strict_dynamic_non_parser_inserted_module.html2 / 20Clean
script-src-strict_dynamic_parser_inserted.html8 / 101TIMEOUT
script-src-strict_dynamic_parser_inserted_correct_nonce.html8 / 80Clean
script-src-strict_dynamic_parser_inserted_module.html3 / 30Clean
script-src-strict_dynamic_parser_inserted_module_empty_hash.html1 / 10Clean
script-src-strict_dynamic_worker-importScripts.https.html1 / 10Clean
script-src-strict_dynamic_worker.https.html2 / 31ERROR
script-src-trusted_types_eval_DedicatedWorker.htmlnone reported0TIMEOUT
script-src-trusted_types_eval_with_report_only_require_trusted_types_eval.htmlnone reported0ERROR
script-src-trusted_types_eval_with_require_trusted_types_eval.htmlnone reported0ERROR
script-src-trusted_types_eval_without_require_trusted_types_eval.html0 / 43TIMEOUT
script-src-wildcards-disallowed.html3 / 30Clean
scripthash-allowed.sub.html1 / 10Clean
scripthash-base64url-converts-to-base64.sub.html1 / 10Clean
scripthash-basic-blocked-error-event.html1 / 10Clean
scripthash-basic-blocked.sub.html1 / 10Clean
scripthash-case-insensitive.sub.html1 / 10Clean
scripthash-changed-1.html1 / 10Clean
scripthash-changed-2.html1 / 10Clean
scripthash-default-src.sub.html1 / 10Clean
scripthash-ignore-unsafeinline.sub.html1 / 10Clean
scripthash-unicode-normalization.sub.html2 / 20Clean
scriptnonce-allowed.sub.html1 / 10Clean
scriptnonce-and-scripthash.sub.html1 / 10Clean
scriptnonce-basic-blocked.sub.html0 / 11NONE-PASSED
scriptnonce-changed-1.html1 / 10Clean
scriptnonce-changed-2.html1 / 10Clean
scriptnonce-ignore-unsafeinline.sub.html1 / 10Clean
scriptnonce-redirect.sub.html1 / 10Clean
scriptnonce-specified-source.sub.html3 / 30Clean
srcdoc-doesnt-bypass-script-src.sub.html1 / 10Clean
worker-data-set-timeout.sub.html1 / 10Clean
worker-eval-blocked.sub.html0 / 11NONE-PASSED
worker-function-function-blocked.sub.html0 / 11NONE-PASSED
worker-importscripts.sub.html2 / 20Clean
worker-script-src.sub.html1 / 10Clean
worker-set-timeout.sub.html2 / 20Clean

Written as HTML by tools/wpt_site/generate.zig from the runner’s journals and result streams; site.js adds the interactive chart, sorting, filtering and search. Faces: Source Serif 4, Public Sans and Source Code Pro, under the SIL Open Font License. Crane on GitHub.