LayoutTests/http/tests/security/contentSecurityPolicy/1.1/frame-ancestors/frame-ancestors-nested-cross-in-allow-same-origin-sandboxed-cross-url-allow.html

   1 <!DOCTYPE html>
   2 <html>
   3 <head>
   4 <script src="/js-test-resources/js-test.js"></script>
   5 <script src="../../resources/frame-ancestors-test.js"></script>
   6 </head>
   7 <body>
   8 <script>
   9 description("A 'frame-ancestors' CSP directive with a URL value should compare against each frame's origin rather than URL, " +
  10             "so a nested frame with a sandboxed parent frame with allow-same-origin should be allowed due to the parent opting " +
  11             "out of the unique origin.");
  12
  13 testNestedIFrame(SAMEORIGIN_ORIGIN + " " + CROSSORIGIN_ORIGIN, CROSS_ORIGIN, CROSS_ORIGIN, EXPECT_BLOCK, "allow-scripts allow-same-origin");
  14 </script>
  15 </body>
  16 </html>