security-and-privacy/CanvasBlocker
security-and-privacy/CanvasBlocker
1
0
Fork 0
mirror of https://github.com/kkapsner/CanvasBlocker synced 2025-07-03 03:56:26 +02:00
Code Releases Activity

Added CSP test

Browse source
This commit is contained in:
kkapsner 2019-12-14 21:22:18 +01:00
parent ddcaf5a2a9
commit a9ed208505
3 changed files with 97 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

25
test/cspTest.php Normal file
View file

@ -0,0 +1,25 @@
<?php
header("Content-Security-Policy: default-src 'none'; img-src 'self'; script-src 'self'");
?>
<!DOCTYPE html>
<html>
<head>
<title>CSP test</title>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<link href="testIcon.svg" type="image/png" rel="icon">
<link href="testIcon.svg" type="image/png" rel="shortcut icon">
</head>
<body>
<h1>CSP test</h1>
<h2>Expected result</h2>
<ul>
<li>if the window API protection is active the window name at start is always empty</li>
<li>the canvas hash changes upon reload</li>
</ul>
<h2>Tests</h2>
<div id="results"></div>
<script src="cspTest.js"></script>
</body>
</html>