how to test CSP

[Nilesh Kumar]

Hi,
I have downloaded the CSP-enabled preview build for Windows. But I
don't know how to use it in order to test the CSP in action.
I can't understand the following line:
"Grab a preview build of Minefield and load this page to see how CSP
works. For each individual test, a CSP-supporting browser will display
PASS while a non-supporting browser will display FAIL. Each test also
contains a comment showing the CSP header that was sent."

Can you tell me how to really test these things?

Regards,
Nilesh

[Justin P. Mattock]

> _______________________________________________
> dev-security mailing list
> dev-se...@lists.mozilla.org
> https://lists.mozilla.org/listinfo/dev-security
>
>
Not sure what your doing here. but with reading
(correct me if I'm wrong) minefield might be just
for Linux distros(x86_64).

could be wrong though.

Justin P. Mattock

[Gervase Markham]

On 26/10/09 08:46, Nilesh Kumar wrote:
> "Grab a preview build of Minefield

Download a copy of the latest trunk builds of Firefox which have CSP
support. The text you quote should have provided a link.

> and load this page to see how CSP
> works. For each individual test, a CSP-supporting browser will display
> PASS while a non-supporting browser will display FAIL. Each test also
> contains a comment showing the CSP header that was sent."

The test page contains a load of tests. If they say PASS, CSP is
working. If they say FAIL, it's not.

> Can you tell me how to really test these things?

Is your question really "how do I learn about the CSP syntax, add CSP to
my own pages, and test whether it's working"?

Gerv