<!DOCTYPE html> <html> <head> <!-- Programmatically converted from a WebKit Reftest, please forgive resulting idiosyncracies.--> <title>object-src-applet-code</title> <script src="/resources/testharness.js"></script> <script src="/resources/testharnessreport.js"></script> <script src='../support/logTest.sub.js?logs=["PASS"]'></script> <script src="../support/alertAssert.sub.js?alerts=[]"></script> <!-- enforcing policy: object-src 'none'; script-src 'self' 'unsafe-inline'; connect-src 'self'; --> </head> <body> <script> var len = navigator.mimeTypes.length; var allTypes = ""; var appletMimeType = "application/x-java-applet"; for (var i = 0; i < len; i++) { allTypes += navigator.mimeTypes[i].type + ';'; } if (allTypes.indexOf(appletMimeType) == -1) { t_log.set_status(t_log.NOTRUN, "No Java Plugin, cannot run test."); t_log.phase = t_log.phases.HAS_RESULT; t_log.done(); } else { var s = document.createElement('script'); s.src = "../support/checkReport.sub.js?reportExists=true&reportField=violated-directive&reportValue=object-src%20'none'"; document.body.appendChild(s); } </script> This test passes if there is a CSP violation saying the plugin was blocked. <applet code="/plugins/code.class"></applet> <div id="log"></div> </body> </html>