<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Security-Policy" content="base-uri 'self'">
<script src="http://localhost:8000/js-test-resources/js-test-pre.js"></script>
<script src="http://localhost:8000/security/contentSecurityPolicy/resources/securitypolicyviolation-test.js"></script>
<script>
    description("Check that base URIs cannot be set if they violate the page's policy.");

    var expectations = {
        'documentURI': document.location.toString(),
        'referrer': document.referrer,
        'blockedURI': 'http://example.com',
        'violatedDirective': "base-uri 'self'",
        'effectiveDirective': 'base-uri',
        'originalPolicy': "base-uri 'self'",
        'sourceFile': document.location.toString(),
        'lineNumber': 24
    };

    function run() {
        var base = document.createElement('base');
        base.href = 'http://example.com/';
        document.head.appendChild(base);

        shouldBe('document.baseURI', 'document.location.href');
    }
</script>
<script src="http://localhost:8000/js-test-resources/js-test-post.js"></script>
</head>
<body>
</body>
</html>
