[test] Add `scriptUrl` to trusted types
Change-Id: I0865832b120dd7b719f79d6374c166e414a180b9
Reviewed-on: https://dart-review.googlesource.com/c/sdk/+/417902
Reviewed-by: Bob Nystrom <rnystrom@google.com>
diff --git a/pkg/test_runner/lib/src/testing_servers.dart b/pkg/test_runner/lib/src/testing_servers.dart
index 405950b..ea44d28 100644
--- a/pkg/test_runner/lib/src/testing_servers.dart
+++ b/pkg/test_runner/lib/src/testing_servers.dart
@@ -360,8 +360,18 @@
var contentHeaderValue = [
"script-src 'self'",
"object-src 'self'",
+
+ // Trusted types (https://w3c.github.io/trusted-types/dist/spec/#trusted-types-csp-directive)
+ //
+ // Policy `dart.deferred-loading` is used to trust dart2js's deferred
+ // loading URLs, and is tested by tests/web/deferred/trusted_script_url
+ //
+ // Policy `scriptUrl` is the name of a policy created to test creation
+ // of policies via js-interop, and is tested by
+ // tests/lib/js/static_interop_test/import/import_trustedscripturl_test
"require-trusted-types-for: 'script'",
- "trusted-types dart.deferred-loading",
+ "trusted-types dart.deferred-loading scriptUrl"
+ ,
].join('; ');
for (var header in [
"Content-Security-Policy",
