| <!DOCTYPE html> |
| <html> |
| <head> |
| <title>'X-Content-Type-Options: nosniff;' blocks scripts!</title> |
| <body> |
| <script src="/js-test-resources/js-test.js"></script> |
| <script> |
| description('Check that script sent with an \'X-Content-Type-Options: nosniff\' header is correctly blocked if no \'Content-Type\' header is present.'); |
| window.jsTestIsAsync = true; |
| window.scriptsSuccessfullyLoaded = 0; |
| window.onload = function () { |
| shouldBe('window.scriptsSuccessfullyLoaded', '0'); |
| finishJSTest(); |
| }; |
| </script> |
| <script src="./resources/script-with-header.pl"></script> |
| </body> |
| </html> |
