Click here to download the Blitz Browser!

WPT

wpt / worklets / layout-worklet-csp.https.html

Spec: https://html.spec.whatwg.org/multipage/worklets.html ↗

Runs: Chrome 154.0.8037.0 (wpt@98a70a0c5) | Firefox 157.0a1 (wpt@318cbb466) | Safari 251 preview (wpt@5ce815a83) | Ladybird 1.0-8f0a1 (wpt@ae6982b12) | Servo Servo 0.5 (wpt@2ccd2cbf8) | Blitz 4dcc855ce (wpt@a95401e4e)

View on the Blitz WPT dashboard | Open test on wpt.live | wpt.fyi

ChromeFirefoxSafariLadybirdServoBlitz
Total24/240/240/240/240/24NOT RUN
SubtestChromeFirefoxSafariLadybirdServoBlitz
A remote-origin worklet should be blocked by the script-src 'self' directive.PASSFAILFAILFAILFAIL
A same-origin worklet importing a remote-origin script should be blocked by the script-src 'self' directive.PASSFAILFAILFAILFAIL
A remote-origin worklet importing a remote-origin script should be blocked by the script-src 'self' directive.PASSFAILFAILFAILFAIL
A remote-origin-redirected worklet should be blocked by the script-src 'self' directive.PASSFAILFAILFAILFAIL
A same-origin worklet importing a remote-origin-redirected script should be blocked by the script-src 'self' directive.PASSFAILFAILFAILFAIL
A remote-origin worklet should not be blocked because the script-src directive specifying the origin allows it.PASSFAILFAILFAILFAIL
A same-origin worklet importing a remote-origin script should not be blocked because the script-src directive specifying the origin allows it.PASSFAILFAILFAILFAIL
A remote-origin worklet importing a remote-origin script should not be blocked because the script-src directive specifying the origin allows it.PASSFAILFAILFAILFAIL
A remote-origin-redirected worklet should not be blocked because the script-src directive specifying the origin allows it.PASSFAILFAILFAILFAIL
A same-origin worklet importing a remote-origin-redirected script should not be blocked because the script-src directive specifying the origin allows it.PASSFAILFAILFAILFAIL
A remote-origin worklet should not be blocked because the script-src * directive allows it.PASSFAILFAILFAILFAIL
A same-origin worklet importing a remote-origin script should not be blocked because the script-src * directive allows it.PASSFAILFAILFAILFAIL
A remote-origin worklet importing a remote-origin script should not be blocked because the script-src * directive allows it.PASSFAILFAILFAILFAIL
A remote-origin-redirected worklet should not be blocked because the script-src * directive allows it.PASSFAILFAILFAILFAIL
A same-origin worklet importing a remote-origin-redirected script should not be blocked because the script-src * directive allows it.PASSFAILFAILFAILFAIL
A remote-origin worklet should not be blocked by the worker-src directive because worklets obey the script-src directive.PASSFAILFAILFAILFAIL
A same-origin worklet importing a remote-origin script should not be blocked by the worker-src directive because worklets obey the script-src directive.PASSFAILFAILFAILFAIL
A remote-origin worklet importing a remote-origin script should not be blocked by the worker-src directive because worklets obey the script-src directive.PASSFAILFAILFAILFAIL
A remote-origin-redirected worklet should not be blocked by the worker-src directive because worklets obey the script-src directive.PASSFAILFAILFAILFAIL
A same-origin worklet importing a remote-origin-redirected script should not be blocked by the worker-src directive because worklets obey the script-src directive.PASSFAILFAILFAILFAIL
An insecure-origin worklet should be blocked because of mixed contents.PASSFAILFAILFAILFAIL
An insecure-origin-redirected worklet should be blocked because of mixed contents.PASSFAILFAILFAILFAIL
A same-origin worklet importing an insecure-origin script should be blocked because of mixed contents.PASSFAILFAILFAILFAIL
A same-origin worklet importing an insecure-origin-redirected script should be blocked because of mixed contents.PASSFAILFAILFAILFAIL