mirror of
https://repo.dactyloidae.xyz/Dactyloidae/UXP.git
synced 2026-09-25 09:57:32 +09:00
Issue #2734 - Add base-64 grammar check to CSP nonces where applicable.
Resolves #2734
This commit is contained in:
parent
5ae40cfe47
commit
51022b98b2
3 changed files with 68 additions and 0 deletions
|
|
@ -227,6 +227,10 @@ TEST(CSPParser, Directives)
|
|||
"report-uri http://www.example.com/" },
|
||||
{ "script-src 'nonce-correctscriptnonce'",
|
||||
"script-src 'nonce-correctscriptnonce'" },
|
||||
{ "script-src 'nonce-a'",
|
||||
"script-src 'nonce-a'" },
|
||||
{ "script-src 'sha256-a'",
|
||||
"script-src 'sha256-a'" },
|
||||
{ "script-src 'sha256-siVR8vAcqP06h2ppeNwqgjr0yZ6yned4X2VF84j4GmI='",
|
||||
"script-src 'sha256-siVR8vAcqP06h2ppeNwqgjr0yZ6yned4X2VF84j4GmI='" },
|
||||
{ "require-sri-for script style",
|
||||
|
|
@ -543,6 +547,34 @@ TEST(CSPParser, PoliciesWithInvalidSrc)
|
|||
"script-src 'none'" },
|
||||
{ "script-src http://www.example.com:*.",
|
||||
"script-src 'none'" },
|
||||
{ "script-src 'nonce-{invalid}'",
|
||||
"script-src 'none'" },
|
||||
{ "script-src 'sha256-{invalid}'",
|
||||
"script-src 'none'" },
|
||||
{ "script-src 'nonce-in$valid'",
|
||||
"script-src 'none'" },
|
||||
{ "script-src 'sha256-in$valid'",
|
||||
"script-src 'none'" },
|
||||
{ "script-src 'nonce-invalid==='",
|
||||
"script-src 'none'" },
|
||||
{ "script-src 'sha256-invalid==='",
|
||||
"script-src 'none'" },
|
||||
{ "script-src 'nonce-==='",
|
||||
"script-src 'none'" },
|
||||
{ "script-src 'sha256-==='",
|
||||
"script-src 'none'" },
|
||||
{ "script-src 'nonce-=='",
|
||||
"script-src 'none'" },
|
||||
{ "script-src 'sha256-=='",
|
||||
"script-src 'none'" },
|
||||
{ "script-src 'nonce-='",
|
||||
"script-src 'none'" },
|
||||
{ "script-src 'sha256-='",
|
||||
"script-src 'none'" },
|
||||
{ "script-src 'nonce-'",
|
||||
"script-src 'none'" },
|
||||
{ "script-src 'sha256-'",
|
||||
"script-src 'none'" },
|
||||
{ "connect-src http://www.example.com/foo%zz;",
|
||||
"connect-src 'none'" },
|
||||
{ "script-src https://foo.com/%$",
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue