<!DOCTYPE HTML>
<html>
<head>
  <title>Bug 1457100: Test OBJECT inherits CSP if needed</title>
  <meta charset="utf-8">
  <meta http-equiv="Content-Security-Policy" content= "img-src https://bug1457100.test.com"/>
</head>
<body>
<object id="dataObject" data="data:text/html,object<script>var foo = 0;</script>"></object>

<script type="application/javascript">
  var dataObject = document.getElementById("dataObject");
  dataObject.onload = function () {
    var contentDoc = SpecialPowers.wrap(dataObject).contentDocument;
    var cspJSON = contentDoc.cspJSON;
    window.parent.postMessage({cspJSON}, "*");
  }
</script>

</body>
</html>
