<!DOCTYPE html><!-- webkit-test-runner [ contentSecurityPolicyExtensionMode=v3 ] -->
<html>
<head>
    <meta http-equiv="Content-Security-Policy" content="default-src 'self' *">
    <script src="../../../resources/dump-as-text.js"></script>
    <p><br>Test that CSP for manifest V3 extensions does not allow wildcards for the default-src directive.</p>
</head>
<body>
<div id="result" text="FAIL">
  PASS
</div>
<script src='http://localhost:8000/security/contentSecurityPolicy/extensions/resources/script.js'></script>
</body>
</html>

