yahooarchive / csptester Goto Github PK
View Code? Open in Web Editor NEWA quick and easy way to test CSP behavior on modern browsers
License: Other
A quick and easy way to test CSP behavior on modern browsers
License: Other
Trying to test on Firefox 60.0.2 (64-bit). Following the example in README.md,
CSP Header :
default-src 'self';
HTML code :
<!DOCTYPE html>
<html lang="en">
<head>
<title>CSP Tester</title>
<link rel="stylesheet" href="http://yui.yahooapis.com/pure/0.5.0/pure-min.css">
<script src="https://ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js"></script>
</head>
<body>
<h1>Hello, world!</h1>
<img src="http://l.yimg.com/a/i/us/nws/weather/gr/30d.png"> </img>
</body>
</html>
Result :
No violation reported
Expected( as per README):
4 violations
Server and Redis responses(combined, as Redis was running in background):
GET / 200 2.705 ms - 2384
GET /stylesheets/pure/0.5.0/pure-min.css 200 1.960 ms - 18943
GET /stylesheets/style.css 200 2.726 ms - 1713
POST /test 200 3.645 ms - 2260
Reply: OK
GET /stylesheets/pure/0.5.0/pure-min.css 304 0.788 ms - -
GET /stylesheets/style.css 304 0.655 ms - -
GET /stylesheets/jquery/1.11.2/themes/smoothness/jquery-ui.css 200 2.203 ms - 31245
GET /javascripts/jquery/jquery-1.11.2.min.js 200 2.358 ms - 95932
GET /javascripts/testscript.js 200 2.019 ms - 1834
GET /javascripts/jquery/jquery-ui-1.11.2.min.js 200 2.933 ms - 90338
GET /images/spinner.gif 200 0.639 ms - 1553
REDIS RECORDS LEN: 0
GET /report/yg4YPcfWmM8Exkgs 200 0.777 ms - -
REDIS RECORDS LEN: 0
GET /report/yg4YPcfWmM8Exkgs 200 0.709 ms - -
REDIS RECORDS LEN: 0
GET /report/yg4YPcfWmM8Exkgs 200 0.786 ms - -
REDIS RECORDS LEN: 0
GET /report/yg4YPcfWmM8Exkgs 200 0.732 ms - -
REDIS RECORDS LEN: 0
GET /report/yg4YPcfWmM8Exkgs 200 0.759 ms - -
REDIS RECORDS LEN: 0
GET /report/yg4YPcfWmM8Exkgs 200 0.829 ms - -
REDIS RECORDS LEN: 0
GET /report/yg4YPcfWmM8Exkgs 200 0.719 ms - -
REDIS RECORDS LEN: 0
GET /report/yg4YPcfWmM8Exkgs 200 0.724 ms - -
REDIS RECORDS LEN: 0
GET /report/yg4YPcfWmM8Exkgs 200 1.159 ms - -
REDIS RECORDS LEN: 0
GET /report/yg4YPcfWmM8Exkgs 200 0.696 ms - -
REDIS RECORDS LEN: 0
GET /report/yg4YPcfWmM8Exkgs 200 0.708 ms - -
Please tell if I am doing something wrong.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.