2019-12-14 21:22:18 +01:00
|
|
|
<?php
|
|
|
|
|
|
|
|
|
|
header("Content-Security-Policy: default-src 'none'; img-src 'self'; script-src 'self'");
|
|
|
|
|
|
|
|
|
|
?>
|
|
|
|
|
<!DOCTYPE html>
|
|
|
|
|
<html>
|
|
|
|
|
<head>
|
|
|
|
|
<title>CSP test</title>
|
|
|
|
|
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
|
|
|
|
|
<link href="testIcon.svg" type="image/png" rel="icon">
|
|
|
|
|
<link href="testIcon.svg" type="image/png" rel="shortcut icon">
|
|
|
|
|
</head>
|
|
|
|
|
<body>
|
|
|
|
|
<h1>CSP test</h1>
|
|
|
|
|
<h2>Expected result</h2>
|
|
|
|
|
<ul>
|
|
|
|
|
<li>if the window API protection is active the window name at start is always empty</li>
|
2020-01-12 13:47:17 +01:00
|
|
|
<li>the canvas hash changes upon reload (depending on CanvasBlocker settings - e.g. not in the stealth preset)</li>
|
2019-12-14 21:22:18 +01:00
|
|
|
</ul>
|
|
|
|
|
<h2>Tests</h2>
|
|
|
|
|
<div id="results"></div>
|
2020-01-06 15:15:04 +01:00
|
|
|
<script src="testAPI.js"></script>
|
|
|
|
|
<script src="canvasAPI.js"></script>
|
2019-12-14 21:22:18 +01:00
|
|
|
<script src="cspTest.js"></script>
|
|
|
|
|
</body>
|
|
|
|
|
</html>
|
