Source code
Revision control
Copy as Markdown
Other Tools
Test Info:
- This WPT test may be referenced by the following Test IDs:
- /fetch/nosniff/parsing-nosniff.window.html - WPT Dashboard Interop Dashboard
promise_test(() => fetch("resources/x-content-type-options.json").then(res => res.json()).then(runTests), "Loading JSON…");
function runTests(allTestData) {
for (let i = 0; i < allTestData.length; i++) {
const testData = allTestData[i],
input = encodeURIComponent(testData.input);
promise_test(t => {
let resolve;
const promise = new Promise(r => resolve = r);
const script = document.createElement("script");
t.add_cleanup(() => script.remove());
// A <script> element loading a classic script does not care about the MIME type, unless
// X-Content-Type-Options: nosniff is specified, in which case a JavaScript MIME type is
// enforced, which x/x is not.
if (testData.nosniff) {
script.onerror = resolve;
script.onload = t.unreached_func("Script should not have loaded");
} else {
script.onerror = t.unreached_func("Script should have loaded");
script.onload = resolve;
}
script.src = "resources/nosniff.py?nosniff=" + input;
document.body.appendChild(script);
return promise;
}, input);
}
}