diff options
| author | y-yagi <yuuji.yaginuma@gmail.com> | 2019-07-19 07:21:07 +0900 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2019-07-19 07:21:07 +0900 |
| commit | 027085a5972a798cfea60f829a9edabbd67a2818 (patch) | |
| tree | 1662bfa35d178f833bc42ba424cab53117fbb023 /actionpack/test | |
| parent | 67705c8bbfa6f6d0e3be1208741a947143111786 (diff) | |
| parent | efae4c268bbecbfbf8020c3302183ce0887f083a (diff) | |
| download | rails-027085a5972a798cfea60f829a9edabbd67a2818.tar.gz rails-027085a5972a798cfea60f829a9edabbd67a2818.tar.bz2 rails-027085a5972a798cfea60f829a9edabbd67a2818.zip | |
Merge pull request #36703 from y-yagi/script-src-xxx_and_style-src-xxx
Add support for script-src-attr / elem and style-src-attr / elem directives
Diffstat (limited to 'actionpack/test')
| -rw-r--r-- | actionpack/test/dispatch/content_security_policy_test.rb | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/actionpack/test/dispatch/content_security_policy_test.rb b/actionpack/test/dispatch/content_security_policy_test.rb index a4634626bb..3d60dc1661 100644 --- a/actionpack/test/dispatch/content_security_policy_test.rb +++ b/actionpack/test/dispatch/content_security_policy_test.rb @@ -128,12 +128,36 @@ class ContentSecurityPolicyTest < ActiveSupport::TestCase @policy.script_src false assert_no_match %r{script-src}, @policy.build + @policy.script_src_attr :self + assert_match %r{script-src-attr 'self'}, @policy.build + + @policy.script_src_attr false + assert_no_match %r{script-src-attr}, @policy.build + + @policy.script_src_elem :self + assert_match %r{script-src-elem 'self'}, @policy.build + + @policy.script_src_elem false + assert_no_match %r{script-src-elem}, @policy.build + @policy.style_src :self assert_match %r{style-src 'self'}, @policy.build @policy.style_src false assert_no_match %r{style-src}, @policy.build + @policy.style_src_attr :self + assert_match %r{style-src-attr 'self'}, @policy.build + + @policy.style_src_attr false + assert_no_match %r{style-src-attr}, @policy.build + + @policy.style_src_elem :self + assert_match %r{style-src-elem 'self'}, @policy.build + + @policy.style_src_elem false + assert_no_match %r{style-src-elem}, @policy.build + @policy.worker_src :self assert_match %r{worker-src 'self'}, @policy.build |