aboutsummaryrefslogtreecommitdiff
path: root/test/test-csp-inline.html
diff options
context:
space:
mode:
authorFlorian Dold <florian.dold@gmail.com>2016-10-10 03:50:11 +0200
committerFlorian Dold <florian.dold@gmail.com>2016-10-10 03:50:11 +0200
commit9af485a584e47fd503ed5c62b9f6482574715f1e (patch)
tree687abbcff412bd4ce5c51d51de030a06e3963cf5 /test/test-csp-inline.html
Squashed 'thirdparty/systemjs/' content from commit 5ed69b6
git-subtree-dir: thirdparty/systemjs git-subtree-split: 5ed69b6344e8fc1cd43bf758350b2236f57e1499
Diffstat (limited to 'test/test-csp-inline.html')
-rw-r--r--test/test-csp-inline.html61
1 files changed, 61 insertions, 0 deletions
diff --git a/test/test-csp-inline.html b/test/test-csp-inline.html
new file mode 100644
index 000000000..4f6dce16e
--- /dev/null
+++ b/test/test-csp-inline.html
@@ -0,0 +1,61 @@
+<!doctype html>
+<html>
+ <head>
+ <link rel="stylesheet" type="text/css" href="../bower_components/qunit/qunit/qunit.css"/>
+ <meta http-equiv="Content-Security-Policy" content="script-src 'self' 'nonce-abc';">
+ </head>
+ <body>
+
+ <h1 id="qunit-header">SystemJS Test Suite</h1>
+
+ <h2 id="qunit-banner"></h2>
+ <div id="qunit-testrunner-toolbar"></div>
+ <h2 id="qunit-userAgent"></h2>
+ <ol id="qunit-tests"></ol>
+ <div id="qunit-test-area"></div>
+
+ <script src="../dist/system.src.js" type="text/javascript"></script>
+ <script src="../bower_components/qunit/qunit/qunit.js"></script>
+
+ <script nonce='abc'>
+ QUnit.config.testTimeout = 2000;
+
+ QUnit.module("SystemJS nonce");
+
+ function err(e) {
+ setTimeout(function() {
+ throw e.stack || e;
+ start();
+ });
+ }
+
+ asyncTest('Importing a script with a good nonce', function() {
+ System.config({
+ meta: {
+ 'tests/csp/nonce.js': {
+ nonce: 'abc'
+ }
+ }
+ });
+ System['import']('tests/csp/nonce.js').then(function(m) {
+ ok(m.nonce === 'abc');
+ start();
+ });
+ });
+
+ asyncTest('Importing a script with a bad nonce', function() {
+ System.config({
+ meta: {
+ 'tests/csp/nonce2.js': {
+ nonce: 'asdf'
+ }
+ }
+ });
+ System['import']('tests/csp/nonce2.js').then(function(m) {
+ ok(m.nonce !== 'ab');
+ start();
+ });
+ });
+ </script>
+ </body>
+</html>