WPT
wpt / worklets / animation-worklet-csp.https.html
Spec: https://html.spec.whatwg.org/multipage/worklets.html ↗
Runs: Chrome 155.0.8039.0 (wpt@508cc6a62, 2026-09-03) | Firefox 157.0a1 (wpt@508cc6a62, 2026-09-03) | Safari 251 preview (wpt@5ce815a83, 2026-08-27) | Ladybird 1.0-56c61 (wpt@8fdda8ce4, 2026-09-03) | Servo Servo 0.6 (wpt@09159dcb3, 2026-09-02) | Blitz 188486089 (wpt@a95401e4e, 2026-09-02)
View on the Blitz WPT dashboard | Open test on wpt.live | wpt.fyi
| Chrome | Firefox | Safari | Ladybird | Servo | Blitz | |
|---|---|---|---|---|---|---|
| Total | 0/24 | 0/24 | 0/24 | 0/24 | 0/24 | NOT RUN |
| Subtest | Chrome | Firefox | Safari | Ladybird | Servo | Blitz |
|---|---|---|---|---|---|---|
| A remote-origin worklet should be blocked by the script-src 'self' directive. | FAIL | FAIL | FAIL | FAIL | FAIL | — |
| A same-origin worklet importing a remote-origin script should be blocked by the script-src 'self' directive. | FAIL | FAIL | FAIL | FAIL | FAIL | — |
| A remote-origin worklet importing a remote-origin script should be blocked by the script-src 'self' directive. | FAIL | FAIL | FAIL | FAIL | FAIL | — |
| A remote-origin-redirected worklet should be blocked by the script-src 'self' directive. | FAIL | FAIL | FAIL | FAIL | FAIL | — |
| A same-origin worklet importing a remote-origin-redirected script should be blocked by the script-src 'self' directive. | FAIL | FAIL | FAIL | FAIL | FAIL | — |
| A remote-origin worklet should not be blocked because the script-src directive specifying the origin allows it. | FAIL | FAIL | FAIL | FAIL | FAIL | — |
| A same-origin worklet importing a remote-origin script should not be blocked because the script-src directive specifying the origin allows it. | FAIL | FAIL | FAIL | FAIL | FAIL | — |
| A remote-origin worklet importing a remote-origin script should not be blocked because the script-src directive specifying the origin allows it. | FAIL | FAIL | FAIL | FAIL | FAIL | — |
| A remote-origin-redirected worklet should not be blocked because the script-src directive specifying the origin allows it. | FAIL | FAIL | FAIL | FAIL | FAIL | — |
| A same-origin worklet importing a remote-origin-redirected script should not be blocked because the script-src directive specifying the origin allows it. | FAIL | FAIL | FAIL | FAIL | FAIL | — |
| A remote-origin worklet should not be blocked because the script-src * directive allows it. | FAIL | FAIL | FAIL | FAIL | FAIL | — |
| A same-origin worklet importing a remote-origin script should not be blocked because the script-src * directive allows it. | FAIL | FAIL | FAIL | FAIL | FAIL | — |
| A remote-origin worklet importing a remote-origin script should not be blocked because the script-src * directive allows it. | FAIL | FAIL | FAIL | FAIL | FAIL | — |
| A remote-origin-redirected worklet should not be blocked because the script-src * directive allows it. | FAIL | FAIL | FAIL | FAIL | FAIL | — |
| A same-origin worklet importing a remote-origin-redirected script should not be blocked because the script-src * directive allows it. | FAIL | FAIL | FAIL | FAIL | FAIL | — |
| A remote-origin worklet should not be blocked by the worker-src directive because worklets obey the script-src directive. | FAIL | FAIL | FAIL | FAIL | FAIL | — |
| A same-origin worklet importing a remote-origin script should not be blocked by the worker-src directive because worklets obey the script-src directive. | FAIL | FAIL | FAIL | FAIL | FAIL | — |
| A remote-origin worklet importing a remote-origin script should not be blocked by the worker-src directive because worklets obey the script-src directive. | FAIL | FAIL | FAIL | FAIL | FAIL | — |
| A remote-origin-redirected worklet should not be blocked by the worker-src directive because worklets obey the script-src directive. | FAIL | FAIL | FAIL | FAIL | FAIL | — |
| A same-origin worklet importing a remote-origin-redirected script should not be blocked by the worker-src directive because worklets obey the script-src directive. | FAIL | FAIL | FAIL | FAIL | FAIL | — |
| An insecure-origin worklet should be blocked because of mixed contents. | FAIL | FAIL | FAIL | FAIL | FAIL | — |
| An insecure-origin-redirected worklet should be blocked because of mixed contents. | FAIL | FAIL | FAIL | FAIL | FAIL | — |
| A same-origin worklet importing an insecure-origin script should be blocked because of mixed contents. | FAIL | FAIL | FAIL | FAIL | FAIL | — |
| A same-origin worklet importing an insecure-origin-redirected script should be blocked because of mixed contents. | FAIL | FAIL | FAIL | FAIL | FAIL | — |