jquery/test/data/support/csp.php

<?php
	# Support: Firefox
	header("X-Content-Security-Policy: default-src 'self';");

	# Support: Webkit, Safari 5
	# http://stackoverflow.com/questions/13663302/why-does-my-content-security-policy-work-everywhere-but-safari
	header("X-WebKit-CSP: script-src " . $_SERVER["HTTP_HOST"] . " 'self'");

	header("Content-Security-Policy: default-src 'self'");
?>
<!DOCTYPE html>
<html>
<head>
	<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
	<title>CSP Test Page</title>
	<script src="../../jquery.js"></script>
	<script src="csp.js"></script>
</head>
<body>
	<p>CSP Test Page</p>
</body>
</html>
Fix #12569. Improve feature detect for event bubbling. Close gh-1076. 2012-12-17 14:17:39 +00:00			`<?php`
Fix 363299ac failures 2013-02-07 22:03:04 +00:00			`# Support: Firefox`
Ref #13316: Sync all documents on full vs. minified source. Close gh-1147. 2013-01-28 04:34:38 +00:00			`header("X-Content-Security-Policy: default-src 'self';");`
Fix 363299ac failures 2013-02-07 22:03:04 +00:00
			`# Support: Webkit, Safari 5`
			`# http://stackoverflow.com/questions/13663302/why-does-my-content-security-policy-work-everywhere-but-safari`
			`header("X-WebKit-CSP: script-src " . $_SERVER["HTTP_HOST"] . " 'self'");`

			`header("Content-Security-Policy: default-src 'self'");`
Fix #12569. Improve feature detect for event bubbling. Close gh-1076. 2012-12-17 14:17:39 +00:00			`?>`
Add another tweak for handling CSP - we need to make sure that we don't trigger any eval on load (not sure if it's the best tweak, definitely not ideal). Add a test page as well so that it's easier to catch problem. 2011-01-18 20:13:09 +00:00			`<!DOCTYPE html>`
			`<html>`
			`<head>`
Fix indentation in /speed and /test dirs, closes gh-780. 2012-05-18 17:28:50 +00:00			`<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />`
Add another tweak for handling CSP - we need to make sure that we don't trigger any eval on load (not sure if it's the best tweak, definitely not ideal). Add a test page as well so that it's easier to catch problem. 2011-01-18 20:13:09 +00:00			`<title>CSP Test Page</title>`
Ref #13316: Sync all documents on full vs. minified source. Close gh-1147. 2013-01-28 04:34:38 +00:00			`<script src="../../jquery.js"></script>`
			`<script src="csp.js"></script>`
Add another tweak for handling CSP - we need to make sure that we don't trigger any eval on load (not sure if it's the best tweak, definitely not ideal). Add a test page as well so that it's easier to catch problem. 2011-01-18 20:13:09 +00:00			`</head>`
			`<body>`
			`<p>CSP Test Page</p>`
			`</body>`
			`</html>`