B2G/gecko/content/base/test/file_bug650386_content.sjs
// uses that value in the report-uri parameter of the CSP
uses that value in the report-uri parameter of the CSP
uses that value in the report - uri parameter of the CSP
function handleRequest(request, response) {
  response.setHeader("Cache-Control", "no-cache", false);
  var redirect = request.queryString;
  if (redirect < 301 || (redirect > 303 && redirect <= 306) || redirect > 307) {
    var loc = "http://example.com/some/fake/path";
    response.setStatusLine("1.1", 302, "Found");
    response.setHeader("Location", loc, false);
    return;
  }
  var csp = "default-src \'self\';report-uri http://mochi.test:8888/tests/content/base/test/file_bug650386_report.sjs?" + redirect;
  response.setHeader("X-Content-Security-Policy", csp, false);
  var content = "<!DOCTYPE HTML><html><body><img src = \"http://some.other.domain.example.com\"></body></html>";
  response.write(content);
  return;
}
function handleRequest ( request , response ) { response . setHeader ( "Cache-Control" , "no-cache" , false ) ; var redirect = request . queryString ; if ( redirect < 301 || ( redirect > 303 && redirect <= 306 ) || redirect > 307 ) { var loc = "http://example.com/some/fake/path" ; response . setStatusLine ( "1.1" , 302 , "Found" ) ; response . setHeader ( "Location" , loc , false ) ; return ; } var csp = "default-src \'self\';report-uri http://mochi.test:8888/tests/content/base/test/file_bug650386_report.sjs?" + redirect ; response . setHeader ( "X-Content-Security-Policy" , csp , false ) ; var content = "<!DOCTYPE HTML><html><body><img src = \"http://some.other.domain.example.com\"></body></html>" ; response . write ( content ) ; return ; }
uses that value in the report-uri parameter of the CSP
uses that value in the report - uri parameter of the CSP
// this gets used in the CSP as part of the report URI. // if we somehow got some bogus redirect code here, // do a 302 redirect to the same URL as the report URI // redirects to - this will fail the test. // the actual file content. // this image load will (intentionally) fail due to the CSP policy of default-src: 'self' // specified by the CSP string above.