48 lines
1.2 KiB
JSON
48 lines
1.2 KiB
JSON
{
|
|
"schemaVersion": 1,
|
|
"task": "M13-05B",
|
|
"operation": "CSP_RESOURCE_POLICY",
|
|
"policy": "default-src 'self'; script-src 'self' 'wasm-unsafe-eval'; worker-src 'self'; connect-src 'self'; font-src 'self'; img-src 'self'; media-src 'self'; object-src 'none'; base-uri 'none'; frame-ancestors 'none'",
|
|
"resources": {
|
|
"worker": "SAME_ORIGIN",
|
|
"wasm": "SAME_ORIGIN_WASM_UNSAFE_EVAL",
|
|
"font": "SAME_ORIGIN",
|
|
"image": "SAME_ORIGIN",
|
|
"media": "SAME_ORIGIN"
|
|
},
|
|
"denied": {
|
|
"dataImage": "DENY",
|
|
"blobWorker": "DENY",
|
|
"crossOriginConnect": "DENY"
|
|
},
|
|
"responseCount": 7,
|
|
"browser": {
|
|
"result": {
|
|
"worker": true,
|
|
"wasm": true,
|
|
"image": true,
|
|
"font": true,
|
|
"media": true,
|
|
"dataImageBlocked": true,
|
|
"blobWorkerBlocked": true,
|
|
"crossOriginBlocked": true
|
|
},
|
|
"violations": [
|
|
{
|
|
"directive": "worker-src",
|
|
"blockedURI": "blob"
|
|
},
|
|
{
|
|
"directive": "connect-src",
|
|
"blockedURI": "http://127.0.0.1:9/csp-cross-origin"
|
|
},
|
|
{
|
|
"directive": "img-src",
|
|
"blockedURI": "data"
|
|
}
|
|
]
|
|
},
|
|
"execution": "DISABLED",
|
|
"nextTask": "M13-05C"
|
|
}
|