1
2
3
4
5
6
7
8
9
10
11
12
13
content / test / data / cross_site_document_blocking / html_import.html [blame]
<!DOCTYPE html>
<script>
// TODO(lukasza, yoichio): https://crbug.com/766694: Remove this test file once
// HTML Imports are removed from the codebase.
// Injecting a <script> into |thisDocument| will use |thisDocument|'s origin
// [the origin of the module being imported] as |request_initiator| (rather than
// |document|'s origin [the importer's origin]).
thisDocument = document.currentScript.ownerDocument;
var script = thisDocument.createElement("script");
script.setAttribute("src", "/site_isolation/nosniff.json");
thisDocument.head.appendChild(script);
</script>