← Về thư mục
- _ScriptInventory · class · L38-L45 — class _ScriptInventory(HTMLParser)
- init · method · L39-L41 — def init(self) -> None
- handle_starttag · method · L43-L45 — def handle_starttag(self, tag: str, attrs: list[tuple[str, str | None]]) -> None
- index_html · function · L49-L52 — def index_html()
- _directive · function · L55-L60 — def _directive(policy: str, name: str) -> str
- test_script_src_never_allows_unsafe_inline · function · L63-L68 — def test_script_src_never_allows_unsafe_inline()
- test_index_html_has_only_same_origin_external_scripts · function · L71-L79 — def test_index_html_has_only_same_origin_external_scripts(index_html)
- test_policy_never_parses_html_to_authorize_scripts · function · L82-L97 — def test_policy_never_parses_html_to_authorize_scripts()
- test_untrusted_artifact_policy_cannot_execute_or_reach_same_origin · function · L100-L107 — def test_untrusted_artifact_policy_cannot_execute_or_reach_same_origin()
- test_the_artifact_sandbox_grants_an_origin_and_never_scripts · function · L110-L123 — def test_the_artifact_sandbox_grants_an_origin_and_never_scripts()
- test_an_artifact_can_load_its_own_sibling_files · function · L126-L135 — def test_an_artifact_can_load_its_own_sibling_files()
- test_untrusted_artifact_headers_remain_embeddable_same_origin · function · L138-L143 — def test_untrusted_artifact_headers_remain_embeddable_same_origin()
- test_a_first_party_framed_document_keeps_the_shell_script_policy · function · L146-L161 — def test_a_first_party_framed_document_keeps_the_shell_script_policy()
- test_the_shell_itself_is_still_unframeable · function · L164-L169 — def test_the_shell_itself_is_still_unframeable()
- test_only_the_pinned_ketcher_editor_can_compile_javascript_strings · function · L172-L193 — def test_only_the_pinned_ketcher_editor_can_compile_javascript_strings()
- _html_preview_renderer · function · L196-L200 — def _html_preview_renderer(app_js: str) -> str
- test_legacy_preview_remains_inert · function · L203-L216 — def test_legacy_preview_remains_inert(index_html)
- test_executable_preview_policy_names_only_the_minting_ancestor · function · L219-L230 — def test_executable_preview_policy_names_only_the_minting_ancestor()
- test_executable_preview_policy_refuses_anything_but_one_origin · function · L246-L255 — def test_executable_preview_policy_refuses_anything_but_one_origin(app_origin)
- test_connect_src_is_same_origin_only · function · L258-L264 — def test_connect_src_is_same_origin_only()
- test_wasm_is_permitted_without_reopening_eval · function · L267-L272 — def test_wasm_is_permitted_without_reopening_eval(index_html)
- test_dangerous_sinks_are_closed · function · L275-L279 — def test_dangerous_sinks_are_closed(index_html)
- test_default_src_is_self · function · L282-L285 — def test_default_src_is_self(index_html)
- test_style_src_inline_is_a_deliberate_concession · function · L288-L293 — def test_style_src_inline_is_a_deliberate_concession(index_html)
- test_all_expected_headers_present · function · L296-L302 — def test_all_expected_headers_present()
- test_the_policy_is_a_constant · function · L305-L310 — def test_the_policy_is_a_constant()
- test_artifact_disposition_is_inline_and_names_only_the_last_component · function · L329-L333 — def test_artifact_disposition_is_inline_and_names_only_the_last_component( stored, ascii_name, encoded )
- test_artifact_disposition_bounds_a_long_name_but_keeps_its_extension · function · L336-L340 — def test_artifact_disposition_bounds_a_long_name_but_keeps_its_extension()