The Vulnerability History Project

Apply 'x-content-type-options' check to dynamically inserted script.

      BUG=348581

Review URL: https://codereview.chromium.org/185593011

git-svn-id: svn://svn.chromium.org/blink/trunk@168570 bbb929c8-8fbe-4397-9dbb-9b2b20218538

by Wallace the Slow Worm 2014-03-06 04:17:45 UTC

commit ed6f4545a2a345697e07908c887333f5bdcc97a3

Chromium VCC CVE-2014-7939

third_party/WebKit/LayoutTests/http/tests/security/contentTypeOptions/nosniff-dynamic-script-blocked-expected.txt

-11

third_party/WebKit/LayoutTests/http/tests/security/contentTypeOptions/nosniff-dynamic-script-blocked.html

-23

third_party/WebKit/Source/core/dom/ScriptLoader.cpp

+3 -6

expand_less