WPT
wpt / content-security-policy / embedded-enforcement / blocked-iframe-are-cross-origin.html
Spec: Content Security Policy: Embedded Enforcement ↗
Runs: Chrome 155.0.8041.0 (wpt@2c385f65e, 2026-09-04) | Firefox 157.0a1 (wpt@2c385f65e, 2026-09-04) | Safari 251 preview (wpt@5ce815a83, 2026-08-27) | Ladybird 1.0-a7825 (wpt@2c385f65e, 2026-09-04) | Servo Servo 0.6 (wpt@7e3d005d7, 2026-09-03) | Blitz a50cb8971 (wpt@a95401e4e, 2026-09-03)
View on the Blitz WPT dashboard | Open test on wpt.live | wpt.fyi
| Chrome | Firefox | Safari | Ladybird | Servo | Blitz | |
|---|---|---|---|---|---|---|
| Total | 2/2 | 1/2 | 1/2 | 1/2 | 0/2 | NOT RUN |
| Subtest | Chrome | Firefox | Safari | Ladybird | Servo | Blitz |
|---|---|---|---|---|---|---|
| Document blocked by embedded enforcement and its parent are cross-origin | PASS | PASS | PASS | PASS | FAIL | — |
| Two same-origin iframes must appear as cross-origin when one is blocked | PASS | FAIL | FAIL | FAIL | FAIL | — |