WPT
wpt / content-security-policy / embedded-enforcement / subsumption_algorithm-nonces.html
Spec: Content Security Policy: Embedded Enforcement ↗
Runs: Chrome 155.0.8041.0 (wpt@2c385f65e, 2026-09-04) | Firefox 157.0a1 (wpt@2c385f65e, 2026-09-04) | Safari 251 preview (wpt@5ce815a83, 2026-08-27) | Ladybird 1.0-a7825 (wpt@2c385f65e, 2026-09-04) | Servo Servo 0.6 (wpt@7e3d005d7, 2026-09-03) | Blitz a50cb8971 (wpt@a95401e4e, 2026-09-03)
View on the Blitz WPT dashboard | Open test on wpt.live | wpt.fyi
| Chrome | Firefox | Safari | Ladybird | Servo | Blitz | |
|---|---|---|---|---|---|---|
| Total | 8/8 | 5/8 | 5/8 | 5/8 | 5/8 | NOT RUN |
| Subtest | Chrome | Firefox | Safari | Ladybird | Servo | Blitz |
|---|---|---|---|---|---|---|
| Exact nonce subsumes. | PASS | PASS | PASS | PASS | PASS | — |
| Any nonce subsumes. | PASS | PASS | PASS | PASS | PASS | — |
| A nonce has to be returned if required by the embedder. | PASS | FAIL | FAIL | FAIL | FAIL | — |
| Multiples nonces returned subsume. | PASS | PASS | PASS | PASS | PASS | — |
| Nonce intersection is still done on exact match - non-matching nonces. | PASS | PASS | PASS | PASS | PASS | — |
| Nonce intersection is still done on exact match - matching nonces. | PASS | FAIL | FAIL | FAIL | FAIL | — |
| Other expressions still have to be subsumed - positive test. | PASS | PASS | PASS | PASS | PASS | — |
| Other expressions still have to be subsumed - negative test | PASS | FAIL | FAIL | FAIL | FAIL | — |