From a0eed131218bb5f922acf52bf3c0a8011fee608a Mon Sep 17 00:00:00 2001
From: "ruijingx.a.han" <ruijingx.a.han@intel.com>
Date: Wed, 3 Jul 2013 22:36:53 -0700
Subject: [PATCH] Add 4 tests for tct-sp02-wrt-tests component due to wrt spec
 update.

Change-Id: Ibd8c85d92850989bce78909f1f2e95928bf6df4e
Signed-off-by: ruijingx.a.han <ruijingx.a.han@intel.com>
---
 tct-sp02-wrt-tests/config-xml-with-csp/config.xml  |   9 ++
 tct-sp02-wrt-tests/config-xml-with-csp/custom.png  | Bin 0 -> 3777 bytes
 tct-sp02-wrt-tests/config-xml-with-csp/index.html  |  80 +++++++++++++++
 .../config-xml-with-csp/support/csp.js             |  33 +++++++
 .../default-policy-by-directives-csp/config.xml    |   9 ++
 .../default-policy-by-directives-csp/custom.png    | Bin 0 -> 3777 bytes
 .../default-policy-by-directives-csp/index.html    | 109 +++++++++++++++++++++
 .../support/COPYING                                |  64 ++++++++++++
 .../support/blue-100x100.png                       | Bin 0 -> 385 bytes
 .../support/csp.js                                 |  33 +++++++
 .../support/red-100x100.png                        | Bin 0 -> 401 bytes
 .../support/red-green.theora.ogv                   | Bin 0 -> 10292 bytes
 .../w3c/support/COPYING                            |  12 +++
 .../w3c/support/CanvasTest.ttf                     | Bin 0 -> 2528 bytes
 .../config.xml                                     |   9 ++
 .../custom.png                                     | Bin 0 -> 3777 bytes
 .../index.html                                     | 109 +++++++++++++++++++++
 .../support/COPYING                                |  64 ++++++++++++
 .../support/blue-100x100.png                       | Bin 0 -> 385 bytes
 .../support/csp.js                                 |  33 +++++++
 .../support/red-100x100.png                        | Bin 0 -> 401 bytes
 .../support/red-green.theora.ogv                   | Bin 0 -> 10292 bytes
 .../w3c/support/COPYING                            |  12 +++
 .../w3c/support/CanvasTest.ttf                     | Bin 0 -> 2528 bytes
 .../enforce-csp-to-resource/config.xml             |   9 ++
 .../enforce-csp-to-resource/custom.png             | Bin 0 -> 3777 bytes
 .../enforce-csp-to-resource/index.html             |  79 +++++++++++++++
 .../enforce-csp-to-resource/support/csp.js         |  33 +++++++
 tct-sp02-wrt-tests/tests.xml                       | 100 +++++++++++++++++++
 29 files changed, 797 insertions(+)
 create mode 100644 tct-sp02-wrt-tests/config-xml-with-csp/config.xml
 create mode 100644 tct-sp02-wrt-tests/config-xml-with-csp/custom.png
 create mode 100644 tct-sp02-wrt-tests/config-xml-with-csp/index.html
 create mode 100644 tct-sp02-wrt-tests/config-xml-with-csp/support/csp.js
 create mode 100644 tct-sp02-wrt-tests/default-policy-by-directives-csp/config.xml
 create mode 100644 tct-sp02-wrt-tests/default-policy-by-directives-csp/custom.png
 create mode 100644 tct-sp02-wrt-tests/default-policy-by-directives-csp/index.html
 create mode 100644 tct-sp02-wrt-tests/default-policy-by-directives-csp/support/COPYING
 create mode 100644 tct-sp02-wrt-tests/default-policy-by-directives-csp/support/blue-100x100.png
 create mode 100644 tct-sp02-wrt-tests/default-policy-by-directives-csp/support/csp.js
 create mode 100644 tct-sp02-wrt-tests/default-policy-by-directives-csp/support/red-100x100.png
 create mode 100644 tct-sp02-wrt-tests/default-policy-by-directives-csp/support/red-green.theora.ogv
 create mode 100644 tct-sp02-wrt-tests/default-policy-by-directives-csp/w3c/support/COPYING
 create mode 100644 tct-sp02-wrt-tests/default-policy-by-directives-csp/w3c/support/CanvasTest.ttf
 create mode 100644 tct-sp02-wrt-tests/default-policy-by-directives-report-only/config.xml
 create mode 100644 tct-sp02-wrt-tests/default-policy-by-directives-report-only/custom.png
 create mode 100644 tct-sp02-wrt-tests/default-policy-by-directives-report-only/index.html
 create mode 100644 tct-sp02-wrt-tests/default-policy-by-directives-report-only/support/COPYING
 create mode 100644 tct-sp02-wrt-tests/default-policy-by-directives-report-only/support/blue-100x100.png
 create mode 100644 tct-sp02-wrt-tests/default-policy-by-directives-report-only/support/csp.js
 create mode 100644 tct-sp02-wrt-tests/default-policy-by-directives-report-only/support/red-100x100.png
 create mode 100644 tct-sp02-wrt-tests/default-policy-by-directives-report-only/support/red-green.theora.ogv
 create mode 100644 tct-sp02-wrt-tests/default-policy-by-directives-report-only/w3c/support/COPYING
 create mode 100644 tct-sp02-wrt-tests/default-policy-by-directives-report-only/w3c/support/CanvasTest.ttf
 create mode 100644 tct-sp02-wrt-tests/enforce-csp-to-resource/config.xml
 create mode 100644 tct-sp02-wrt-tests/enforce-csp-to-resource/custom.png
 create mode 100644 tct-sp02-wrt-tests/enforce-csp-to-resource/index.html
 create mode 100644 tct-sp02-wrt-tests/enforce-csp-to-resource/support/csp.js

diff --git a/tct-sp02-wrt-tests/config-xml-with-csp/config.xml b/tct-sp02-wrt-tests/config-xml-with-csp/config.xml
new file mode 100644
index 0000000..c1c7ad9
--- /dev/null
+++ b/tct-sp02-wrt-tests/config-xml-with-csp/config.xml
@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<widget xmlns="http://www.w3.org/ns/widgets" xmlns:tizen="http://tizen.org/ns/widgets" id="http://tizen.org/config-xml-with-csp" version="1.0.0" viewmodes="maximized">
+    <tizen:content-security-policy>connect-src *</tizen:content-security-policy>
+    <tizen:application id="wrt8cxw002.ConfigXmlWithCsp" package="wrt8cxw002" required_version="2.2"/>
+    <content src="index.html"/>
+    <icon src="custom.png"/>
+    <name>config-xml-with-csp</name>
+    <tizen:setting install-location="auto"/>
+</widget>
diff --git a/tct-sp02-wrt-tests/config-xml-with-csp/custom.png b/tct-sp02-wrt-tests/config-xml-with-csp/custom.png
new file mode 100644
index 0000000000000000000000000000000000000000..6bdebd113e90aeb44fe9d81c9cdd825071e23af7
GIT binary patch
literal 3777
zcmV;y4nFaTP)<h;3K|Lk000e1NJLTq004jh004jp1^@s6!#-il00004b3#c}2nYxW
zd<bNS00009a7bBm000W`000W`0Ya=am;e9(9CSrkbW?9;ba!ELWdK2BZ(?O2Mrm?o
zcW-iQb09-gGzPNMpa1{>6?8>dbVG7wVRUJ4ZXi@?ZDjy6F)uhTFgZ_y%On5*4jM^B
zK~#90?VZ1G<K`L1zx*MQl6|HwDIgCASOp54hXAJ`Ks^LF1;}vQxj=#3R&{E(-hZIe
z*v;8GYD|C>@okr>^5y^?Bp`ziNKhGQ0Sir1@qCg<iWEDLlu3#bN%5!T_X8Mb>m>3O
zpYQv;&-*^lOH$Y|sx6@cpbns6zGVGd18@}ZFxLPE=I>qGzrA5w97StkzM!&hKvb$N
zp#j6l4H$+O5<aB}pa(+`-C<koCVaj`**XDKTS5)MDGY-@&$KajyoMo&^I=;YWZRT*
zY=r=9MsEUml4)c7=>zCsOT>_C0aROpW%RuC^su}J&>6PH^Q;@Pirfjn4C0yqULttV
zmUpfJoWT%7u7b$i2*5P_OY<k`KrSmp7(zJ9ix6@lfND#4h21v18xe*GUS-{oOa)+$
z@n_f_S09#Z057wQ5i${g8P#_HJk8?#IphLBGmBXRllBQsci#c<IPG)im>PgT?l*XT
zd?9z!JaK9sfb{ynr0NY)5r8??cW{4#yr_sUM38uFKqq~IYD+i+@C}IZ!yo|o#=Lfk
zl9&fD=k@0xE<Y+408W!yH%P<-R9iwFMskE0KRQnVbj@oTJF$BJoAHUuj~5X@W7rmZ
zaUL{Q0TAOSPV6FxZ3r+6GrAzgPZ9yfaL|bBfU$T0((_X%Hct>)0L1v25sL^S34j<s
zb0UjiV*!}+{4VleqP6SvVTfR(b%H2C;5mr#^S~1rw%CY`vVrCj<>#B8ln^_${RaPV
zd?CLH`@zsdfSK6&ChX@3sqnk738YX0FjKlckf1NGhydzgQpsUsfDVZ9^Naw)Mu7<&
z1DKUOe+bteLI%|K8$1=XvMA6HKwSUU5qKyFIs|k;jK56;9twN~U`G8UufKgfHEp++
zARZv`vLr%c_}Xr55NHN|+qyB6095<}!j(awxz;}b8T+>#5kPHKu3+5|aG&<-?J@!k
zTYBQ@0Z8xPIaYdsRUV)TV*Fh~fML@mRtaFG%OGqmo;F<)fH`-(uiLeEnIo@t0WS~G
zOuj9IjA*)Fa0G$on*YC2Y78M8er?YYxIKXH(jj5%aoE@`fM$B_AY??-{>NenAnyNO
zu^0yI9)P(2`@_Q4b^$cfZwDbG8rCm%0g$ZU{b6Bi3Rvvy{YO@<*%s6r4Rc9f{LNHo
zFqLQ<taVAp>_&6ER;;m+jv0_ohi$QIov9JmQI&xTWuW@LkLD?`hfFLN5dh??nd3qh
z4jFLAg~-QM1}dc94ARvMx~zM?hpjRw95N`>7?kQo-(%{Mj%iQ9v^Rq~)I8rqag^hj
zaa<!84FJgqV0<Bm`V1q`;OhnKop7M|&9*DvzLB7bbH_2G3gGsQgvodQ-$fm2P=^|(
zefSDMz0olGa^h&K7rLxNxmKZE8=Yyt!3S@6FdD#J43NnEXM&=MbBr%!{L&diz47i5
z>yWQzOBYlV=a8>v8@K7*`P9?+#UmEQBNl8m{H{9nM#C?i@lsnEfnFS!;!?YHV;ulk
zGxwiZ>bH2rqEK^QEcIp%^+sE|5b98acs|94f8Gyuj%m-^(9_;*BQG$ylrilqj@R~{
za!Vdcmvkrt74nt3c8IXvJNk0scn@1;@ZcH0H0G-}8kB*$c8G`pq1qBEEE4Yhg&MQc
zeJKMKw{IlJmsE!uradLlSPB5zXb$<Uw*cg~Gw6~YdRTeib@u#&=OxefP&@_hxB%|B
zfCH4)dYoxbaR{ERGWejm=h-&)kO6zhpnSqX8_l6htA!PjI*knH|HT?>Tm+Zfldt@P
zNQ-GtiS++&l!5B#rNtvQuo%~Q8~1m5@Qe>6Or}DEJxuJD&W*(H6zT`XQ%e^($SlG_
zvbldopiz3_Jl5ngya4RDhp$bsf;o$nrh2|)>H#dcW9P+KH<sFQ2Y-CM0KV?*g_<}I
zB`7z#wDCuMj+>ZU4@34IAPVl_uT(FhSYyEm&aWk{2ok-ZdG~O%`Aou&dzh1AI&M^G
z8275*I^4k@_qecFEGeHjhXLto7P!Z`U9%?6@$P&Yv9-&`y?rBXH06z%8jT#(|G8as
z@yLICbO(1Oo9lN6W4f#d?s4oPv*baheZ`o<MR40*!`v^OacmxDLymGW1h`$a`(pWh
z#=YvtRA_LIogxSm3?7`8mR^(J&hYc!-fwKMQoXn&Y+cqd`f7rA=hMt$g3JZ*zAG&)
z2>C7Ecm;oMO0L(`p$2WVe)-j+SYvVUd|3pVILGL#3I5j^2R@da%8Rn+3gWb{;J;_L
zm|TWiLXU$?1@OKrE#(c$zvX-rAMQD|*F2p&E-bn7FkYZkFQW2!*>h=DxmNMh7q_^5
zBZca@6i?xU=H8Nb0t|0(`>lkZ&Tb>kTEfEYH~3d^9#9#mm|fomH^mz32!M>G(;39C
zr;y(|zbIQ}P<c^adwgBeA^v@`_?vrNK>1_ug_^mfJKCcDG{@d2T;T7*{)z$rQ32}B
z+%tJI`;P|c``IF^83c-@z<*Q#%~P2DTLWBipf2l>`ZMSfP<+IIVw24cBrbs2wTAJ9
zy!es&Gblf*OLKkhaRCoslzqSO^q&fpAMb>-_X&r>ij^{^LSyost=DVDYpdSx1#K==
zF%=rhV70-3aEm*IM=bb{3eZM6w4c4jCI6tJ_=o|$pPZvkTmZfe5NJGj#^b?fd?2-p
zUr!g}p*RYa->>!<G*4kRa3`IN9vGIwA!B$N7M|a4cCBGP(nBSmXx?Z`vBpBZnPWb7
zc8d8}hxGjn+;7;#M3A}w7{Ta)e7%5!XC>@^#s}_^%0PAW=<>%LxZn8qI{Q$g{X9ph
zUR+x62?E7ZDAtVJfY-2~4mHp`g~Fq7%e+j5M)~8S_pqP=$`2|^^<pB!LE;P2dr!I8
ziW%I~MP1VIz8ik6cG^=SwTY?Fc-Y*-<Wk1%x6bpw@5+X;HV|0(gadb6!05|~BSWf*
zbBr(LB#J_k7eHL-lD?FqcmEv}sW*$|VwTPNfOoI&Rtk05DEBI#1P?atFclgfH1~|+
z7@G(tm(fJK3L3@(jB`)ewC*~hCW!2m>cyoDq%w%M#7pti(rieV^(2;#uUQy(0?B+i
z*bn<0p5myb^?pC3o^$a?>dj(H$#Tc6!yCo1s>f7luvNz41?KUu77n&z2v7#9bLH>2
z5ZWCw724sdr+p=GQHCFJ9K(xE0@cvxfbrCiT;mS@!uEc^5RH3PFRo$5-Q(jb;db}<
z1WLoZndbuh&?RRkkF7Erl}J%M1>QABUsX&R7WdM0992ZxXzp<Tj1bTM2{*a-0Pbqr
zO?v;T&#FUhDX@BXKE>ox4m^%edx~THr?_RIDFYSn&ZmI`Ppg91j#t7f2D&VayMX5w
zckt)FxM8qz{q}fba;Z4dzuIVyX<xzZw-UI=1#rhkF2mjXbV<kfQeH}C38y8`m|)sB
zgkq(xt>e1!s+4A{t1GJ`(qo5haa3&yB64_JIQ2$zTnPTS5INu~pA;R7H`3J%2Ut%1
z0!9shRdr--)dGyM*{fdv;Cab+DOeNdn0zNMHl46lW)bYoZnUKwiB&$H0OGJMjx1T{
z(hIoLw^7``g*$a@E!_BF->T&{KE+X}d|nP*K5j=HYK!A~CCFCo9f*M*aJLfJMNGGZ
zce}MHb8YsJ#$Lr(QL{FaMup-j96T>M3Oel5t;&nCxxv+l58UP4c8W)=QHkv1nTj<Q
zAO30IaokmV0~vuvvBsi&QcQ9`0AR*`WP5l3+*`Qg5~F*&dEt;rY)!#~Pls)>YrjWO
zE(+BN=`d`I6yPigd!12R2<fx1wOs(+^xHwmh_3aET>u+Df0nRyENs0HfO+4zeip4E
zq)LC?tztW=HieJ{9s3_{0gz!}_i@<RApp}gklDcQ^4k40QLp@BCzYlUvY_LBVbw#U
z2H1i!F+wP=hi$RuesNWW0eM>J?%`?ERRZY1c+?nSHxRL6X!jI=`FuIz1$KwCO`aTj
z2I2*F0TF9D^GX2_FR(ML?ES!+heunG8NpWL8Ts1@QfEw_BD%f!+AdJ}Nwp<(5mU(+
zAvG?BZL#6^rl30wnjit;HX$P5BLD*xwv8|3(SC#Hk%QaH5(4qpVOtE8*b7yGNQQ!~
zAdu^~2)o&=2{IJqnZT~!B9s8kRAQ(T5K^V-PWSo|y10FOAz$q`_=f;a!hV*JC|?ZQ
zV(5jtjdvlCcpz7V8u#r)*>HXeQbd{u`iSt{=ScgIsx6@oqsBaUJB#lLB7nxQEpEKI
zH}Xa_B7)3_Y<wUF0RTh<84!!{ftYR=Z#Lu<WQ`yVL;$C87$1nq16UAGkT|jRe2dsO
zqZ1J%M(oB15_n>W*}w+K6fsWvNWl0&0v^D^d?@uf$YN1cE?|uLE6ci~kof&bsx9FR
zz+aL+&yMoNuq`H9k(J5~X{s&Z6h>V-i3@@u!bt2SzF9Z5I}%k}LJfup$dIs}3v7_p
z+mzG<U{P%euV54_5^vx{gi*r%D$SFoE&zad0}oQ|^>#85fQ1<woZ<fNJGch$GL5l*
z6`2aa;vNnQnYeo|av=a<v2O4ZyDbE3pWfQ-T4|CS0a%zqXu=S}t_%&=Fbv<xi{UMD
zCjdKUjL-z|JmaQp%4--#&+W~(axDN0bJk#q;Yp^A@uv@ChI5`pR3DbD5P%(<7#hfr
zXLt=G1G*JPx3hHuaAV%;-ukH{`2bRc@vwz1fbOs@b`w5dqHMhY+?YXR9e4W}t$%9>
r9#me#c%UY5cVp!)fL`8$xTyRe`)Jg&1RiM`00000NkvXXu0mjfhlveJ

literal 0
HcmV?d00001

diff --git a/tct-sp02-wrt-tests/config-xml-with-csp/index.html b/tct-sp02-wrt-tests/config-xml-with-csp/index.html
new file mode 100644
index 0000000..2f47314
--- /dev/null
+++ b/tct-sp02-wrt-tests/config-xml-with-csp/index.html
@@ -0,0 +1,80 @@
+<!DOCTYPE html>
+<!--
+Copyright (c) 2012 Intel Corporation.
+
+Redistribution and use in source and binary forms, with or without modification,
+are permitted provided that the following conditions are met:
+
+* Redistributions of works must retain the original copyright notice, this list
+  of conditions and the following disclaimer.
+* Redistributions in binary form must reproduce the original copyright notice,
+  this list of conditions and the following disclaimer in the documentation
+  and/or other materials provided with the distribution.
+* Neither the name of Intel Corporation nor the names of its contributors
+  may be used to endorse or promote products derived from this work without
+  specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY INTEL CORPORATION "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL INTEL CORPORATION BE LIABLE FOR ANY DIRECT,
+INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
+BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY
+OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
+NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
+EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+  
+Authors:
+        yunfeix.hao <yunfeix.hao@intel.com>
+
+-->
+
+<html>
+  <head>
+    <title>WRT Test: config-xml-with-csp</title>
+    <link rel="author" title="Intel" href="http://www.intel.com" />
+    <link rel="help" href="http://www.w3.org/TR/CSP" />
+    <meta name="flags" content="" />
+    <meta name="assert" content="Check that WRT MUST enforce CSP policy in content-security-policy tag in config.xml" />
+    <meta charset="utf-8">
+    <style>body{ background:red }</style>
+  </head>
+  <body onload="test()" id="body">
+    <h1 id="verdict">FAIL</h1> 
+    <p id="reason">Test did not run.</p>
+    <script src="support/csp.js"></script>
+    <script language="javascript" type="text/javascript">
+      var id = "config-xml-with-csp";
+      var reason  = document.getElementById("reason");
+      var body    = document.getElementById("body");
+      var verdict = document.getElementById("verdict");
+
+      /* Called if the test passed */
+      function pass(excuse) {
+        body.style.backgroundColor = "green";
+        verdict.innerHTML = "PASS";
+        reason.innerHTML  = excuse;
+      }
+
+      /* Called if the test failed */
+      function fail(excuse) {
+        reason.innerHTML = excuse;
+      }
+
+      /*Called to perform the test */
+      function test() {
+        try {
+          var xhr = new XMLHttpRequest();
+          xhr.open("GET", "support/csp.js");
+          why = "Test "+ id +" passed because WRT MUST enforce CSP policy in content-security-policy tag in config.xml";
+          pass(why);
+        } catch(e) {
+          why = "Test "+ id +" failed by throwing the following exception: " + e;
+          fail(why);
+        }
+      } 
+    </script>
+  </body>
+</html>
+
diff --git a/tct-sp02-wrt-tests/config-xml-with-csp/support/csp.js b/tct-sp02-wrt-tests/config-xml-with-csp/support/csp.js
new file mode 100644
index 0000000..de46ff6
--- /dev/null
+++ b/tct-sp02-wrt-tests/config-xml-with-csp/support/csp.js
@@ -0,0 +1,33 @@
+/*
+Copyright (c) 2013 Intel Corporation.
+
+Redistribution and use in source and binary forms, with or without modification,
+are permitted provided that the following conditions are met:
+
+* Redistributions of works must retain the original copyright notice, this list
+  of conditions and the following disclaimer.
+* Redistributions in binary form must reproduce the original copyright notice,
+  this list of conditions and the following disclaimer in the documentation
+  and/or other materials provided with the distribution.
+* Neither the name of Intel Corporation nor the names of its contributors
+  may be used to endorse or promote products derived from this work without
+  specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY INTEL CORPORATION "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL INTEL CORPORATION BE LIABLE FOR ANY DIRECT,
+INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
+BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY
+OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
+NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
+EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+Authors:
+        Zhang, Zhiqiang <zhiqiang.zhang@intel.com>
+
+*/
+
+var X = 10;
+var Y = eval(X + 17);
\ No newline at end of file
diff --git a/tct-sp02-wrt-tests/default-policy-by-directives-csp/config.xml b/tct-sp02-wrt-tests/default-policy-by-directives-csp/config.xml
new file mode 100644
index 0000000..438a2dc
--- /dev/null
+++ b/tct-sp02-wrt-tests/default-policy-by-directives-csp/config.xml
@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<widget xmlns="http://www.w3.org/ns/widgets" xmlns:tizen="http://tizen.org/ns/widgets" id="http://tizen.org/default-policy-by-directives-csp" version="1.0.0" viewmodes="maximized">
+    <tizen:content-security-policy></tizen:content-security-policy>
+    <tizen:application id="wrt8dpb004.DefaultPolicyByDirectivesCsp" package="wrt8dpb004" required_version="2.2"/>
+    <content src="index.html"/>
+    <icon src="custom.png"/>
+    <name>default-policy-by-directives-csp</name>
+    <tizen:setting install-location="auto"/>
+</widget>
diff --git a/tct-sp02-wrt-tests/default-policy-by-directives-csp/custom.png b/tct-sp02-wrt-tests/default-policy-by-directives-csp/custom.png
new file mode 100644
index 0000000000000000000000000000000000000000..6bdebd113e90aeb44fe9d81c9cdd825071e23af7
GIT binary patch
literal 3777
zcmV;y4nFaTP)<h;3K|Lk000e1NJLTq004jh004jp1^@s6!#-il00004b3#c}2nYxW
zd<bNS00009a7bBm000W`000W`0Ya=am;e9(9CSrkbW?9;ba!ELWdK2BZ(?O2Mrm?o
zcW-iQb09-gGzPNMpa1{>6?8>dbVG7wVRUJ4ZXi@?ZDjy6F)uhTFgZ_y%On5*4jM^B
zK~#90?VZ1G<K`L1zx*MQl6|HwDIgCASOp54hXAJ`Ks^LF1;}vQxj=#3R&{E(-hZIe
z*v;8GYD|C>@okr>^5y^?Bp`ziNKhGQ0Sir1@qCg<iWEDLlu3#bN%5!T_X8Mb>m>3O
zpYQv;&-*^lOH$Y|sx6@cpbns6zGVGd18@}ZFxLPE=I>qGzrA5w97StkzM!&hKvb$N
zp#j6l4H$+O5<aB}pa(+`-C<koCVaj`**XDKTS5)MDGY-@&$KajyoMo&^I=;YWZRT*
zY=r=9MsEUml4)c7=>zCsOT>_C0aROpW%RuC^su}J&>6PH^Q;@Pirfjn4C0yqULttV
zmUpfJoWT%7u7b$i2*5P_OY<k`KrSmp7(zJ9ix6@lfND#4h21v18xe*GUS-{oOa)+$
z@n_f_S09#Z057wQ5i${g8P#_HJk8?#IphLBGmBXRllBQsci#c<IPG)im>PgT?l*XT
zd?9z!JaK9sfb{ynr0NY)5r8??cW{4#yr_sUM38uFKqq~IYD+i+@C}IZ!yo|o#=Lfk
zl9&fD=k@0xE<Y+408W!yH%P<-R9iwFMskE0KRQnVbj@oTJF$BJoAHUuj~5X@W7rmZ
zaUL{Q0TAOSPV6FxZ3r+6GrAzgPZ9yfaL|bBfU$T0((_X%Hct>)0L1v25sL^S34j<s
zb0UjiV*!}+{4VleqP6SvVTfR(b%H2C;5mr#^S~1rw%CY`vVrCj<>#B8ln^_${RaPV
zd?CLH`@zsdfSK6&ChX@3sqnk738YX0FjKlckf1NGhydzgQpsUsfDVZ9^Naw)Mu7<&
z1DKUOe+bteLI%|K8$1=XvMA6HKwSUU5qKyFIs|k;jK56;9twN~U`G8UufKgfHEp++
zARZv`vLr%c_}Xr55NHN|+qyB6095<}!j(awxz;}b8T+>#5kPHKu3+5|aG&<-?J@!k
zTYBQ@0Z8xPIaYdsRUV)TV*Fh~fML@mRtaFG%OGqmo;F<)fH`-(uiLeEnIo@t0WS~G
zOuj9IjA*)Fa0G$on*YC2Y78M8er?YYxIKXH(jj5%aoE@`fM$B_AY??-{>NenAnyNO
zu^0yI9)P(2`@_Q4b^$cfZwDbG8rCm%0g$ZU{b6Bi3Rvvy{YO@<*%s6r4Rc9f{LNHo
zFqLQ<taVAp>_&6ER;;m+jv0_ohi$QIov9JmQI&xTWuW@LkLD?`hfFLN5dh??nd3qh
z4jFLAg~-QM1}dc94ARvMx~zM?hpjRw95N`>7?kQo-(%{Mj%iQ9v^Rq~)I8rqag^hj
zaa<!84FJgqV0<Bm`V1q`;OhnKop7M|&9*DvzLB7bbH_2G3gGsQgvodQ-$fm2P=^|(
zefSDMz0olGa^h&K7rLxNxmKZE8=Yyt!3S@6FdD#J43NnEXM&=MbBr%!{L&diz47i5
z>yWQzOBYlV=a8>v8@K7*`P9?+#UmEQBNl8m{H{9nM#C?i@lsnEfnFS!;!?YHV;ulk
zGxwiZ>bH2rqEK^QEcIp%^+sE|5b98acs|94f8Gyuj%m-^(9_;*BQG$ylrilqj@R~{
za!Vdcmvkrt74nt3c8IXvJNk0scn@1;@ZcH0H0G-}8kB*$c8G`pq1qBEEE4Yhg&MQc
zeJKMKw{IlJmsE!uradLlSPB5zXb$<Uw*cg~Gw6~YdRTeib@u#&=OxefP&@_hxB%|B
zfCH4)dYoxbaR{ERGWejm=h-&)kO6zhpnSqX8_l6htA!PjI*knH|HT?>Tm+Zfldt@P
zNQ-GtiS++&l!5B#rNtvQuo%~Q8~1m5@Qe>6Or}DEJxuJD&W*(H6zT`XQ%e^($SlG_
zvbldopiz3_Jl5ngya4RDhp$bsf;o$nrh2|)>H#dcW9P+KH<sFQ2Y-CM0KV?*g_<}I
zB`7z#wDCuMj+>ZU4@34IAPVl_uT(FhSYyEm&aWk{2ok-ZdG~O%`Aou&dzh1AI&M^G
z8275*I^4k@_qecFEGeHjhXLto7P!Z`U9%?6@$P&Yv9-&`y?rBXH06z%8jT#(|G8as
z@yLICbO(1Oo9lN6W4f#d?s4oPv*baheZ`o<MR40*!`v^OacmxDLymGW1h`$a`(pWh
z#=YvtRA_LIogxSm3?7`8mR^(J&hYc!-fwKMQoXn&Y+cqd`f7rA=hMt$g3JZ*zAG&)
z2>C7Ecm;oMO0L(`p$2WVe)-j+SYvVUd|3pVILGL#3I5j^2R@da%8Rn+3gWb{;J;_L
zm|TWiLXU$?1@OKrE#(c$zvX-rAMQD|*F2p&E-bn7FkYZkFQW2!*>h=DxmNMh7q_^5
zBZca@6i?xU=H8Nb0t|0(`>lkZ&Tb>kTEfEYH~3d^9#9#mm|fomH^mz32!M>G(;39C
zr;y(|zbIQ}P<c^adwgBeA^v@`_?vrNK>1_ug_^mfJKCcDG{@d2T;T7*{)z$rQ32}B
z+%tJI`;P|c``IF^83c-@z<*Q#%~P2DTLWBipf2l>`ZMSfP<+IIVw24cBrbs2wTAJ9
zy!es&Gblf*OLKkhaRCoslzqSO^q&fpAMb>-_X&r>ij^{^LSyost=DVDYpdSx1#K==
zF%=rhV70-3aEm*IM=bb{3eZM6w4c4jCI6tJ_=o|$pPZvkTmZfe5NJGj#^b?fd?2-p
zUr!g}p*RYa->>!<G*4kRa3`IN9vGIwA!B$N7M|a4cCBGP(nBSmXx?Z`vBpBZnPWb7
zc8d8}hxGjn+;7;#M3A}w7{Ta)e7%5!XC>@^#s}_^%0PAW=<>%LxZn8qI{Q$g{X9ph
zUR+x62?E7ZDAtVJfY-2~4mHp`g~Fq7%e+j5M)~8S_pqP=$`2|^^<pB!LE;P2dr!I8
ziW%I~MP1VIz8ik6cG^=SwTY?Fc-Y*-<Wk1%x6bpw@5+X;HV|0(gadb6!05|~BSWf*
zbBr(LB#J_k7eHL-lD?FqcmEv}sW*$|VwTPNfOoI&Rtk05DEBI#1P?atFclgfH1~|+
z7@G(tm(fJK3L3@(jB`)ewC*~hCW!2m>cyoDq%w%M#7pti(rieV^(2;#uUQy(0?B+i
z*bn<0p5myb^?pC3o^$a?>dj(H$#Tc6!yCo1s>f7luvNz41?KUu77n&z2v7#9bLH>2
z5ZWCw724sdr+p=GQHCFJ9K(xE0@cvxfbrCiT;mS@!uEc^5RH3PFRo$5-Q(jb;db}<
z1WLoZndbuh&?RRkkF7Erl}J%M1>QABUsX&R7WdM0992ZxXzp<Tj1bTM2{*a-0Pbqr
zO?v;T&#FUhDX@BXKE>ox4m^%edx~THr?_RIDFYSn&ZmI`Ppg91j#t7f2D&VayMX5w
zckt)FxM8qz{q}fba;Z4dzuIVyX<xzZw-UI=1#rhkF2mjXbV<kfQeH}C38y8`m|)sB
zgkq(xt>e1!s+4A{t1GJ`(qo5haa3&yB64_JIQ2$zTnPTS5INu~pA;R7H`3J%2Ut%1
z0!9shRdr--)dGyM*{fdv;Cab+DOeNdn0zNMHl46lW)bYoZnUKwiB&$H0OGJMjx1T{
z(hIoLw^7``g*$a@E!_BF->T&{KE+X}d|nP*K5j=HYK!A~CCFCo9f*M*aJLfJMNGGZ
zce}MHb8YsJ#$Lr(QL{FaMup-j96T>M3Oel5t;&nCxxv+l58UP4c8W)=QHkv1nTj<Q
zAO30IaokmV0~vuvvBsi&QcQ9`0AR*`WP5l3+*`Qg5~F*&dEt;rY)!#~Pls)>YrjWO
zE(+BN=`d`I6yPigd!12R2<fx1wOs(+^xHwmh_3aET>u+Df0nRyENs0HfO+4zeip4E
zq)LC?tztW=HieJ{9s3_{0gz!}_i@<RApp}gklDcQ^4k40QLp@BCzYlUvY_LBVbw#U
z2H1i!F+wP=hi$RuesNWW0eM>J?%`?ERRZY1c+?nSHxRL6X!jI=`FuIz1$KwCO`aTj
z2I2*F0TF9D^GX2_FR(ML?ES!+heunG8NpWL8Ts1@QfEw_BD%f!+AdJ}Nwp<(5mU(+
zAvG?BZL#6^rl30wnjit;HX$P5BLD*xwv8|3(SC#Hk%QaH5(4qpVOtE8*b7yGNQQ!~
zAdu^~2)o&=2{IJqnZT~!B9s8kRAQ(T5K^V-PWSo|y10FOAz$q`_=f;a!hV*JC|?ZQ
zV(5jtjdvlCcpz7V8u#r)*>HXeQbd{u`iSt{=ScgIsx6@oqsBaUJB#lLB7nxQEpEKI
zH}Xa_B7)3_Y<wUF0RTh<84!!{ftYR=Z#Lu<WQ`yVL;$C87$1nq16UAGkT|jRe2dsO
zqZ1J%M(oB15_n>W*}w+K6fsWvNWl0&0v^D^d?@uf$YN1cE?|uLE6ci~kof&bsx9FR
zz+aL+&yMoNuq`H9k(J5~X{s&Z6h>V-i3@@u!bt2SzF9Z5I}%k}LJfup$dIs}3v7_p
z+mzG<U{P%euV54_5^vx{gi*r%D$SFoE&zad0}oQ|^>#85fQ1<woZ<fNJGch$GL5l*
z6`2aa;vNnQnYeo|av=a<v2O4ZyDbE3pWfQ-T4|CS0a%zqXu=S}t_%&=Fbv<xi{UMD
zCjdKUjL-z|JmaQp%4--#&+W~(axDN0bJk#q;Yp^A@uv@ChI5`pR3DbD5P%(<7#hfr
zXLt=G1G*JPx3hHuaAV%;-ukH{`2bRc@vwz1fbOs@b`w5dqHMhY+?YXR9e4W}t$%9>
r9#me#c%UY5cVp!)fL`8$xTyRe`)Jg&1RiM`00000NkvXXu0mjfhlveJ

literal 0
HcmV?d00001

diff --git a/tct-sp02-wrt-tests/default-policy-by-directives-csp/index.html b/tct-sp02-wrt-tests/default-policy-by-directives-csp/index.html
new file mode 100644
index 0000000..2393cc6
--- /dev/null
+++ b/tct-sp02-wrt-tests/default-policy-by-directives-csp/index.html
@@ -0,0 +1,109 @@
+<!DOCTYPE html>
+<!--
+Copyright (c) 2012 Intel Corporation.
+
+Redistribution and use in source and binary forms, with or without modification,
+are permitted provided that the following conditions are met:
+
+* Redistributions of works must retain the original copyright notice, this list
+  of conditions and the following disclaimer.
+* Redistributions in binary form must reproduce the original copyright notice,
+  this list of conditions and the following disclaimer in the documentation
+  and/or other materials provided with the distribution.
+* Neither the name of Intel Corporation nor the names of its contributors
+  may be used to endorse or promote products derived from this work without
+  specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY INTEL CORPORATION "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL INTEL CORPORATION BE LIABLE FOR ANY DIRECT,
+INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
+BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY
+OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
+NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
+EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+Authors:
+        yunfeix.hao <yunfeix.hao@intel.com>
+
+-->
+
+<html>
+  <head>
+    <title>WRT Test: default-policy-by-directives-csp</title>
+    <link rel="author" title="Intel" href="http://www.intel.com" />
+    <link rel="help" href="http://www.w3.org/TR/CSP" />
+    <meta name="flags" content="" />
+    <meta name="assert" content="Check that default CSP policy enforced by WRT is default-src '*'; script-src 'self'; style-src 'self'; object-src 'none'." />
+    <meta charset="utf-8">
+    <style>body{ background:red }</style>
+    <style>
+        @font-face {
+            font-family: Canvas;
+            src: url("w3c/support/CanvasTest.ttf");
+        }
+        #test {
+            font-family: Canvas;
+        }
+    </style>
+  </head>
+  <body onload="test()" id="body">
+    <h1 id="verdict">FAIL</h1> 
+    <p id="reason">Test did not run.</p>
+    <iframe src="support/blue-100x100.png"></iframe>
+    <img src="support/blue-100x100.png"/>
+    <video width="100" height="100" src="support/red-green.theora.ogv"/>
+    <object data="support/red-100x100.png"/>
+    <h3></h3>
+    <script src="support/csp.js"></script>
+    <script language="javascript" type="text/javascript">
+      var id = "default-policy-by-directives-csp";
+      var reason  = document.getElementById("reason");
+      var body    = document.getElementById("body");
+      var verdict = document.getElementById("verdict");
+      var result = false;
+      var why;
+
+      /* Called if the test passed */
+      function pass(excuse) {
+        body.style.backgroundColor = "green";
+        verdict.innerHTML = "PASS";
+        reason.innerHTML  = excuse;
+      }
+
+      /* Called if the test failed */
+      function fail(excuse) {
+        reason.innerHTML = excuse;
+      }
+
+      /*Called to perform the test */
+      function test() {
+        try {
+          var xhr = new XMLHttpRequest();
+          xhr.open("GET", "support/csp.js");
+          var h3 = document.querySelector("h3");
+          var display = getComputedStyle(h3)["display"];
+
+          if(X == 10 && display != "inline") {
+            result = true;
+          } else {
+            result = false;	
+          }
+
+          if(result) {
+            why = "Test "+ id +" passed because The default CSP policy enforced by WRT is default-src '*'; script-src 'self'; style-src 'self'; object-src 'none'";
+            pass(why);
+          } else {
+            why = "Test "+ id +" failed because The default CSP policy enforced by WRT is not default-src '*'; script-src 'self'; style-src 'self'; object-src 'none'";
+            fail(why);
+          }
+        } catch(e) {
+          why = "Test "+ id +" failed by throwing the following exception: " + e;
+          fail(why);
+        }
+      } 
+    </script>
+  </body>
+</html>
diff --git a/tct-sp02-wrt-tests/default-policy-by-directives-csp/support/COPYING b/tct-sp02-wrt-tests/default-policy-by-directives-csp/support/COPYING
new file mode 100644
index 0000000..75fc3d7
--- /dev/null
+++ b/tct-sp02-wrt-tests/default-policy-by-directives-csp/support/COPYING
@@ -0,0 +1,64 @@
+blue-100x100.png
+is created by Windows Paint.
+
+red-100x100.png
+is created by Windows Paint.
+
+
+Copyright (c) 2013 Intel Corporation.
+
+Redistribution and use in source and binary forms, with or without modification,
+are permitted provided that the following conditions are met:
+
+* Redistributions of works must retain the original copyright notice, this list
+  of conditions and the following disclaimer.
+* Redistributions in binary form must reproduce the original copyright notice,
+  this list of conditions and the following disclaimer in the documentation
+  and/or other materials provided with the distribution.
+* Neither the name of Intel Corporation nor the names of its contributors
+  may be used to endorse or promote products derived from this work without
+  specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY INTEL CORPORATION "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL INTEL CORPORATION BE LIABLE FOR ANY DIRECT,
+INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
+BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY
+OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
+NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
+EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+Authors:
+        Zhang, Zhiqiang <zhiqiang.zhang@intel.com>
+        Hao, Yunfei <yunfeix.hao@intel.com>
+---------------------------------------------------------------------
+
+red-green.theora.ogv comes from
+https://www.khronos.org/registry/webgl/sdk/tests/conformance/resources/red-green.theora.ogv
+without any modification.
+
+
+Khronos Group License (MIT):
+
+Copyright (c) 2012 The Khronos Group Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a
+copy of this software and/or associated documentation files (the
+"Materials"), to deal in the Materials without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Materials, and to
+permit persons to whom the Materials are furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be included
+in all copies or substantial portions of the Materials.
+
+THE MATERIALS ARE PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+MATERIALS OR THE USE OR OTHER DEALINGS IN THE MATERIALS.
diff --git a/tct-sp02-wrt-tests/default-policy-by-directives-csp/support/blue-100x100.png b/tct-sp02-wrt-tests/default-policy-by-directives-csp/support/blue-100x100.png
new file mode 100644
index 0000000000000000000000000000000000000000..584f9c3cd416b8c73e3afe63a9e58d1773333c27
GIT binary patch
literal 385
zcmeAS@N?(olHy`uVBq!ia0vp^DIm<j1SJ1AFfjuumUKs7M+SzC{oH>NS%G}c0*}aI
z1_r)^Ak4U9V)k1G21aF17srr_xVKj}@-`TVI6H3of8hW}<)qWy8oJ`w?9ct)_uS^*
zRi^(D=O6EmJ`nLRtS5Dib=cSck2l3kJH0CFStXC*k%Dup#F9D`+d|LU^eeVWoQu5b
z1Qgw{YUXppBLaslS4RQmB*IKT+q6j}S)_+@gG5)Q%{wmO%=3Ir7EmrJ;_8{t5=k8o
z=Y;AW0gA4kRVnApV>oB?s#c(AVyN-?WS|knVOxQ6hHL0&=?#g0)s^PlHTiQz6_XP`
RJOG9vgQu&X%Q~loCICyWnfw3%

literal 0
HcmV?d00001

diff --git a/tct-sp02-wrt-tests/default-policy-by-directives-csp/support/csp.js b/tct-sp02-wrt-tests/default-policy-by-directives-csp/support/csp.js
new file mode 100644
index 0000000..de46ff6
--- /dev/null
+++ b/tct-sp02-wrt-tests/default-policy-by-directives-csp/support/csp.js
@@ -0,0 +1,33 @@
+/*
+Copyright (c) 2013 Intel Corporation.
+
+Redistribution and use in source and binary forms, with or without modification,
+are permitted provided that the following conditions are met:
+
+* Redistributions of works must retain the original copyright notice, this list
+  of conditions and the following disclaimer.
+* Redistributions in binary form must reproduce the original copyright notice,
+  this list of conditions and the following disclaimer in the documentation
+  and/or other materials provided with the distribution.
+* Neither the name of Intel Corporation nor the names of its contributors
+  may be used to endorse or promote products derived from this work without
+  specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY INTEL CORPORATION "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL INTEL CORPORATION BE LIABLE FOR ANY DIRECT,
+INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
+BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY
+OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
+NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
+EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+Authors:
+        Zhang, Zhiqiang <zhiqiang.zhang@intel.com>
+
+*/
+
+var X = 10;
+var Y = eval(X + 17);
\ No newline at end of file
diff --git a/tct-sp02-wrt-tests/default-policy-by-directives-csp/support/red-100x100.png b/tct-sp02-wrt-tests/default-policy-by-directives-csp/support/red-100x100.png
new file mode 100644
index 0000000000000000000000000000000000000000..d13fc8068293d8be1864e608728faa28206e1fe7
GIT binary patch
literal 401
zcmeAS@N?(olHy`uVBq!ia0vp^DIm<j1SJ1AFfjuu#^NA%Cx&(BWL^R}Ea{HEjtmSN
z`?>!lvI6;>1s;*b3=DjSL74G){tBRWMm0|t$B>G+x7QAGHaG}42XcSR_&@h%^Rxs$
zMFswEJK7(9o;>rho&I~}#>bEC@5eDEupVUMUgIZd+#PvlR(^`1h_j){VFlKN#;YrN
z(hR#JKZ~4UFPOq+%ODmp_fm@3<{7EdY?=%}9jOK&9m^B!8Wx+pVBB!v)fBbOGmh%q
zHt=AKNGR26jy#ie&4%?eqs&rA{sz{t<t8(a>ZILlbL2X}v^rSwOp@5<XPPtkA87Da
zG3actT6$6^&G57tPY}qSQwczOO#KhmFt}%4U<Nux(--8FZHW_@fcAv20qt2+$@Prc
z!mC*h<djS!pi?&SHj9AlF#<Xw?QF1t{DDBJFAPAZcufX6Wm>Mp5|BMp59*}-y|RW~
YL*qk<tyknzU@$Uxy85}Sb4q9e07VRv<^TWy

literal 0
HcmV?d00001

diff --git a/tct-sp02-wrt-tests/default-policy-by-directives-csp/support/red-green.theora.ogv b/tct-sp02-wrt-tests/default-policy-by-directives-csp/support/red-green.theora.ogv
new file mode 100644
index 0000000000000000000000000000000000000000..1543915a1080c8bac5ded8b16554baec290d1c81
GIT binary patch
literal 10292
zcmeG?c|6o>_usLOHOtt=3{#Ay3@XHJOx7tH!>CcJ!Nib~LAh;X4M{cGsqAIKjS#Jt
zi|jk4jS7`gm&&~@*YEkx=w99T{@(Zf^uB-nKELyMJm)#*JkL4LInVwbn|ys;ApvLs
zs`u~<zZ5iFM-X-~S$+(<4<z_i4Dj>C#NW`1szRH-(Jk%EmyOljxQEbVhxjq}2Ga!v
z5Rfp0gdj2mv0-_r5d;ao;MGJxkhvb>FIv**JQ<Xd^^$<lK!oiL_F}SNmH_)Y1kD40
z-XVCn2Ent>uMTq9H=q(KFBs4jAd`V}UVHa2AOpaHy9WDZ6bdo`FaF{r%maOd*6-aD
z!q^jH=oTKtut0|~eHeRJ^8Jt!U#t)AB&-7N5)81}#qc%W-|C}>`Y`vd<a;C~{%z;s
z9>Q8)I6BNoN5O7>g;Npy9_Rz<7G{v&icP`3=-o^&J{OH&fkzt~8JQcI85^T@-TXpX
zdl<WY=s36w+ThRDdHp6ETZ+}LU4cOiUt@kNL!%YOtMyr7d+@8xjZHN`HP=m4%6i)!
zn_L~NT^+2<SDTuzGRFHDnfRE~*BBc|@|)f2)SavC3{b8rb|lHLvM2C~l;i>o5})WL
z6OBO<fEqr?29~+{a_)R~m-~FceCzHBz4v~X+;rt}SPz-s!_Bi!>~a-5P(j6=iN{8&
zAP-qCO%lnsX5VnvLx~A_VE{v2GFG6T5ND>KI5NIE+~8yrePv5jN_CglPwoj-#0X=K
zZSIoEGZ{5Q45PH;%P1LU90$y)V~zE9NBvEeC7Qf)38(C|WB{Y?&Q1dqGAe>_`R#uS
zb#=dBtgXpCJ!7&M7Z<|lC?H*2$YTguJismpSvYrb!SE;-7e2*f@iM5c9ASOBybiR-
zxYXBQ9_<BWeSO^+0#7gR?X8!^18Qun*E*uSz87GS0|W{HU<6&xMMOrK^wiaj;q&tw
zgFySpsAO06m@K`2RjA+?#>=(9ZYZQT(j-J!@t8s*N@zT6e_E_tOw$J)5xX$_e+n3k
z%jsMI7;8F=a$V>=GMAt8SpPJW#n5MnM4~muI#LV9^hh~?h}JVO^{>HN78Chl_3G7l
zj7!0C7)RvC0<_xr9Zdae!2dZC-&ewb0PKr6UA}<o`BZ%`j|s*KmI2hefX4XL*cguq
z22fU3)_PxV1A>nPFg!{?%LQf%Xi;4Fh~mPdD3sGMlS1L-EudTk0%0A|AP~VvQ42_j
z$BYsZLI4>+LI^$*5#UiG$OVLi4sG8Sa(MfLSL;@mT~^(tb0|iweo+2kaEI-+q&0O%
z#^r2o)|YcW4pK}z%9`#*i`}Vzy>w$*7rp9|R3evh<J0~nt!v|$8J@?>g;t)nkG(|R
z?Q`Qu@U+)v`^s<~u{o-Pb;3k3KxNI5CdqwKBbHOOn7Xzh@4eaU65igBo4xv3XK9f}
z?<B>hS>WZ+E?08EEfqtI{fCGjQNNUTT-PQ{lMmXT4bBSOe|fX8ULx`qcK*0+N$`>y
zo3&XxrZG%4$)=Q?HO{1G<hi{TocC@i$XPSzl#;tE)+ES!MifM}J~?(h^zpn;^UPhG
z=#{$4skKQ4?%qq-ZAo?~Z2DTO<_8LE@2PJ&q^Tp+*IIeNaMa}Gb47O{5AW6#SR_`e
zapRT9fbG2C-QNz2)keSixOHb~(DGELkS4^0^BbxI8#_Gp;HLBPG=HhCD|ESmH4^$#
z>zXv|j|6c!$-=#7eSXg05tDMfwY6}>{%j3P=GeaJ-I^}~ZFP}lK}}OM+mw^o9ryQR
zRu3FbPi)Lx_tB?XHG!-hO`~0#eeF1LWF*?A_VRNNpE+lV^j}YRhbmAEN_OZTe#0J#
zpC2wdV5fD8(TI95vSMxjft?alw2SPQ8fu5G<vQzcJr^7n_b$bz&;GX}JNXHvuClsg
zvlsRSCQSB-`!oH5#+9A)N3gTo64!L7*2aD~lXACtRQvv%=sp48$_+Ya-7c8u^cd1>
zmaJVZzWf7CD?sY?q<+(`o#O*P`qa#yOepqffIfaOl7IFfU}QyhgFz_^F{bYof0JV+
zLAyOh)k^z$@7m92oBa$F9z10GZw$1rXq9(9PBV{g{utwySZmQG|9OwJY;==U)d$bD
z<(>s<X<c&Rike70irpKD^&fDSrQY!^EArN}f;v>m_jl|{)Bhb+lkL@+hxLi>dtKVH
z=Ip1@kAo?ZaY6I@(#URl1#A7p3P+s$CdRVY)csKT`MtX57WeSz*B#}f6fLq;Q5wxO
z=BT}B?Sab1TlPcxcwfzDV$*xcG*8lgv1x6g&Z;y=<CyxRx1?iK#zr0|ZS?vbLDkXP
znC|^dWO|8LW$26&E3OSueTBJVf7us?7uUi4=J{aJCHWdFzA$`kXTqM*<4glf?zQFX
z#<*QYWZ8|3Ctf`)CU`9770T(?geK-%3y%*WhvM`oqd(%+{9B7c=tslUa^0(}e)hYj
zu>qYmUn{y~)kCWZ9jw#ESdq}<IO=KE`U`Z^ii4VycRe&^err_gxVmnw{ZA&x^|$%G
zkXfF_w8|IAOdPHBxFtBLc{N)KB_~&%wc}93sJ+smaT<fP<w_{>P`fx)^I9x|rJ*)N
zV;+zz3M|RAKd+P2Yn2!D@g-HgLJDS`YySOhSiIelrSyjT;-h=KC7+0P|K>`rl6-n)
zM8w-ME5IPb;#Nh|BX#A`1gqv}^JU}0wrHQ#gC-ltbCZ@{OQ`sHorbm*XHM}%PpQ&H
z71NIU+qO8Z^HaF%N<RLy*j$tIDP*si0>$EX^n~)v50#kw+dY!KA|nM(D^8EUU@#u-
z!9AFbxs6aHKSZ>>J>{ey7}8~_dEMKZ;q&Ili<Doz999qNJ6>sv+gcO){0LoD|MTXZ
z=Tk0Sw<bR-G!hNS8@+nrQQU@B$<8WL-|qCW`D3^NyNdFgB=TF?ci8Rq$1&B#nZ7H3
zuQPYP7Ww$nfpR79HmVtRC8;j3IJwiL`Pqj!7Z&t>=H!sO-J8;u6rAE0?eh*YB_)YU
zXN;Lyf`R+4|DLz>!UlV_xGv(0;~gqq%&b7atM?QL6pQI5rsMptF+V$fMxCUa=3f-M
z8+0_S@n9ltmbTNzfix26{ic0rK(C;t{kDJ+?ARGow;gYfObtuot!o1l?u2Jk9qb%P
zOp`!X-kd=YW_C2JZRKl?_svfZmTZQ^@weZ7t}Dv*e}h1G^z9mHPnFf4Zm3-OquHl@
zwLL$#;)?>SQtZT5+P7uKE%~A3^7*S*72h63Y45W<Zyry@A~zkatSEo%QX?)HNHgtL
zlwX<pM&#+csR+=_C^vOYC)Q7T6XT;C*JhJpDgE&_q?}oDOzZHMX{sZ`hsYYM<|=Qm
zX;;knWYX>}y8Rc@g`r3`JQ4+6mf@IN&z3yA%#b<Xt}u-&7Cc5iDL+$Iw`1vJL-J0C
zWlVf^?RcWoqwAkt$!{jz>#Veor=*<QL;QSGTSPmMv7C8svwUwIjiy8{zNmeu=7w=b
zQSgbX7BThGJi*RKCnw*qPqf+hf8?INeM%;Izid-N!?R1x8Px*~ySB{lwZ5@Ea(I4!
zOH4{6wb8(1S0HznQnx+M0&OqOCAnl>f2k#4uc%PFOrnT>^l9M6a_0Fq#qP0Js}v~g
zMB0|8M_RYVCp!mTnvdO5*>P=1>HQ1&R*Z~gm6Nqp*HIlKtUQ>$wBVNO;&bBKwnw{`
z{wRIh*+Hrb?qYevC$1~>OLs$D>4WkXZr9UjSC=J)H-079<zjTfq}aHeabj+d=3G-k
z>+hj5c8F9%6R=1mrqkZd2Uk?BLLOp2l(SX588lV?qLtYHTNJPJ6H48Wp6lTbJZV_9
zhx0iG6?LE$6UPp+kPPxYy?bhU<FCW^pMvvmZ_p3d<J$egSuYEXhA5AAYuy`uknu~|
z$q(c9M^fEqsBR~oVq>)sb<gqj=WMV1RBQ6oQ}cCO(iel$XWU{1O3?X>2)VZ#`%MBF
zZFXkspR_gIxb@ES-crqJ3Gdj#mD_IT(6)(Y#k5K)Cl)a?sw*C^6FsW+e97cw8`Yph
z(?zLtj1c6oJsCLZnBg7sFn?<gjn+2Y|Et}YPT&_bG2}?HQAVnMr%7PxfK5@}nL82h
z-i19qPrR<p-eb5<#jD?Vmr_<h$W2EnB5ITSW>SG*xCUZ|G3Q(vkpCqy$T#`M^`QKV
zcVzOhVzxt<Z)Dg^9$xpcY3KdTmY}WGmzia5DgR{jzI`vjFEIGMRF2nS%7%S?D}BX+
z{72SOP+{?t$({F@L_6{yOlyqH|ErHAgfQPKj=0_(0Y4|%S{s#rX7`+;LXZpu<&>;R
zJ$UEl+@pgL7wu68<KWWM68oMX<7z=^`sM}IgYAIFLYw+1K#&l`#vwC<M~N?Q&S|Jj
z$hxTNwZNsAc%x*M7^{>Kk15QV2gH|FlNv}VnlJ>O_yi;-8bxuy#C*+gh3Q@ixT18g
zHrxeuRtLTX9VKn?yx<I(D26K_lk|!Uk|`v^ArIE{P0@#}H`c$Rqh*Ld$=8hM2O9JR
zFnxGTSTkQA-z_x%P49Rb)n2aN*{k09i+Z>0G8egJy~c+9lvS=KR#Z3JK{x7Vs;B4v
zz`?M<!PLNEcV59gkX9Xd|J%fK9gTo;w9Pr%IF1&M^VEzZ6dhY40QtZn$<a-CYL@iO
zA!!+tvnxE+H$L-XM&|S4bK<-zU_J=(-k+lf5+)BM`G#|NdFBOXX3@W!2!40;AOeVG
z%RY5}vJb|J@*;c({zO2aU|WI>>{+HQEKB<ko0gD`t;ue!Rof)K4g&lY0fGqf2DYx2
zEoUsd<yUq0n|8`OxtKcj{~O5_6~UV?z!A*ZU8(+Tq{%5dFDz`JRyh~BUXpJKREW!c
zhR*ECob5E1&K%DvMrHNa$Gc_e)E1{_vAWDBvv+r?Jk4fx;o35qax!`{SzV5jnT7mP
zxLlTKX>lLmsZ3@|H>=P=J!W5~Xz{%*pe?N@bK+tx3Y6lLvvjIz-T3-=N?BdS+q1js
z&Bs8C_>ruDS}{*h`pqYMx>F410lN#C7;pLzz_`)xDmR~vL?2EP@j_vWFlRJEPD-E2
z!Qa6ZXq-s0BNa!HDJnXJA(1@K(GV0Zvv?L`VwJt(Fc-3e#q};0a1!*|bgy(6w;RA&
zNn@AA)a6E*^^*9?K9a$zL3i&HRTJk}W#$e6g;hfy`h{SE;|lpJ3JfaR=ajXG3U7VH
zrU!#nkrOGtc;Mb*yJeU5E=t|MsDsJOpU=F>Ox+w7NJ|U7e>KMQZs_CT!;gng>`;nj
z&{DrieAj^|5WJjt%Q4w25#N#><xCXg5AeduvEPSkIj!D$8oQwa>(pn^Ib*tM*0fjN
z7EBjc1<ziE(0)aR>uS&bRg8WrV=#<yubQ#->S0>-;m31}(s1bFl>?TImU+@shi_L-
z(i5{JZAT84##zo=ImH?0UKHp3W##1fC0s~PxDb~x8JDCRpURBS<ksfxZY!I*_Ak>P
zD+eqXkZdVf+izA*9bSDsSUeR5PP2R;t$M-k5MryecmN=%?v&&Pcq_rWPz(nts|G2C
zR5vT?zk)${X@S6|K#&RqHC8_B3+_IV<Dh3>HN<fl$2O^}CgeoAv!oPE;~bA;yu>lf
z@u|`lMcD(Yt~eEz8*4YlEzVKOqKJYMF+_rSi-dAjAn6tawp{?b;p?|T$9|}D7HXdb
z!wLhT&$MpFlrU?_C;zh?>m+E}4W|V)z|bZX0wg|NH)B~RZ&fF6`=43iw^sj)E#MI_
z)GfbY3wQ(!{g-V0H~RbkI{r^b08BfCH26~_=3?{(*k%am7}lDDcI+`_`_Ot!{Zu!~
zqiKq!Qkf$C{No*t24MyWOr`RWr%ab*ia15-e*NMOL1-orWQw>5IlzJ<>#u7FwCdR?
zpNDjbW(rvLN9z(%^vu5xEE|H@2vLX)$+r>y=u_SnMF=wEc+((g)QrPGKx_sr51jU?
zh4ET{ujb$9{>31ItqVcNfWaX3c7Y^s8i8XVv6BXM3i_!MPzboP0Ngt@(`AaHx~4wM
zAQ@q3l#FWcGj(}pmRiWnyK~xLL%+>w1~YRqW4USP>_*wV$?zhv?pfeBGa-*F0FD<B
zc40W|tNlm@(qz9oBnXX#>c-4c$HViUhv)faa@+P9w9neOpqyN()Rd=wsgv<}x|u~>
zt{yPd%{!u~R8POm1@^TSmfZ`rJ(bQ)hUe)f6cuyJBwSFo;Nk-|@L^$~6tK82uMuD#
zV0kLV@l}>h2`p4f@nkc(TrN0o1l&M{;ZTN34&0<nza1J5^&C!N&_qUow5<aCt}|MP
zfY5bFi`I)3NHwRLw-8FTLJNumb0LvV!WT+<%MrzM=^Kd-7#|8n4_7Eo)LWK9v34jd
zpcs=33sWh=m=q4F7+pZ2;DjOeQZw+k1sM}tA_UEV+nzUkXis8^B>Y4+OAb@03~n~X
zC~x?Vlgz<`i;gqtMLOW=6#8@k-WiGoeED(26^4K+;BHNPt{wvJA7@$8L<B_OM>}D+
zvyq$|FWd@H-6%X<=X4T^n2wyH@N<*#MO=SQ0gqG6{Ue^RfETA=&xL3%YtQq8!^@R`
zFO_c8;TZUW%jHfrRKsB%4yE4*K?G5%10e$;yaONK1`-goDF}k}F4IG!&*YWYfrCx}
zJ};y3NF2Cx-9Z<~5FKzar@o#32(}ww$OM#v3sr!WH^@LqZn6X>dA$E><_@95Vg&1)
zqoposXQNICE2>t=K}b<BqSkTv=U8x`i;?l}adarGQr3@Fjv|vtrB&&clj_kF4}Zhv
zXXcaWf&q_2{PJPoNnxtj@$wo)q8_el$g8APIfdeHSgjoJy6IvvX#>7lIl!oS0<Jvd
zaU5@PRc=EfzS$#Mwz)~syQFGZD^a$hsn4UdO2j*{yteADe`l?-c4C=fm3u&^FqCd-
z1`(FsHESgG(Z>9Oz%GGcKLC#~FiE`Oxd4V7SxiYZ2OR?sr`%);g*SV^ZIDdF6&57o
zCwKz*e#*o#I?Q1KxTz-hQKqt4pat*Zx~y;j_`?@aNF+m`N*Abt>w$cs1t5zHlNVZm
zW`K^70XBH`3X;FxfdT1gSd~oC<qMKI9zYFG707@g3TZ(=A#DKqU>iIsFLzrYafJhL
zGrrU#00fw#$FEm8;1K}S^XoB7fgutug|8lLyAgsAfi0V&=ygG5vqprrxXSVz-rVzn
zAj$k>ild=zq*kGFK`L>X0*g#Z&}B(eN{WeH=m~5}0zNu9%FS3bh0<Xyj$v%XiIk=&
zTQsNVr~B*WdP{;m)*6B$PKgPL=hP8IAayj>0RhDb$4bj;5fTLipFZgmfzZg)Dq6DT
z%Gl*@g0@W|(B+!CQ%fKfRW+uPQV)YIajj;GfV4&uWsVE#q7kAx58nQ)b}lGNJ|uy(
zl=q$^2tweNhgBok*qE}^muhIDF<RQ#WxOvE3%4c+g1<<>r;q`XIEAoWuERf)c8Wln
z5acK>BP-jfZhx#r)FJK;(lNeOj08?9u$2Qqq9O3>4qRfx8G`?_wh&x~0sdJV*8Bcp
zQ{KXl<)9Kz#QR+vmW2zw=oFlv?_DP#F}%inPjKV5@!Iw)%jXQIw*)-6S{ukpoite0
zsh?dveQ!8qY0vxVtq(4TzSe(GU6a4hPW8!&CglV5Q6j4k?5scDwkDbWlkOvzswTAr
zqhZt@-B+zQ^26;^XHJZ(HLQu=@#bN;p|!R19%RjHigMURBvSR|S+nuRP~7H(m8e|=
z!ZP=O{go4AcIt+~+o#T%3JFOb=)Y99f7|qiiOzI^508l!Jdk_0z0Xa*kX(`LNxVQ*
z(C5<J%8H!`9#n+Cz<}_hCplHt{*i;i7b8e{!ZzZu+oMB5^w?C0i*VH|e#gBqxQToI
zW)n(W7e&_1G3l7K?B-=tQ&U;s@28*2j@<eKuB4EIbH=S79zN{5at9x11EEXpUEs{^
zoQ8&+vcEvGu&%h#^|gG!zIyd4y&hy{KZ4G#3f$p7SQ)5k*PH3#;jslk=<9>qheBSj
zb?#d)Y19Z(q8Ui-X)6e|!OtYpR&1*c9{-m5G_|9@Q5hfgHQj!E_{-Jp!&MVKqtejV
zB(^`?IwB%Mm?mDK;G=hkdg>C!omg^=hiyD~$aX9)LUJ@hKuEVY-|nnM$T*I~${qpT
zQro(9tJ?kh_eTJ<rMguV4(rh<ZE0JI85`gN%t<kTiLHe&qep>9EJ)r92)pTW;{QmW
zJHFiCx^;ix0ze2ol&(W@%tk%Bt9ZIwLy>}!tPf4;lY$Z8J=C&4yYCrN4;;~#xNQ|B
zm$Z}2o+RjUYpHEz)c0GsP40RlC4;*zt)g*XZ}z`VeMJ4uo%_RsYgAF^fu+vg%FXx_
z5=my$7iUvGyy(BWC*$DI)tdna`wk9N=<xqD1R}WeCp)~r;P(+{(Cds6STTPGkht{U
z0sq_Kl0~ZqRutLLV7Ekyul#F%bSB(cQ$XX`W$hqSG`|_4f-i*a!>iIPR50j&v;TL-
z0gtapdy#!uk*^zh4)xXWV!U8inqMEb3qJ5cbB`pgzRRxRBD=7n&+i)=#s9R&x3*?c
zB@rMzGKV?#50${>oColKtAH~Z`jRW7`*lwu`16HucVPv-Io0{!)m`&NM&RvN6q^t3
zPYW?={?iEDfm+kejPEkCVUZCrpeU?1&_xb{WI=H;fa#!jOXT?IRE_K@HWa+`0KXg5
zMXli=*~Ql1|A%0KkH9>Dg9WZ$P;ksZ+8=&s!P_?f(13khDb1mMmmixK8G%p3-JugN
z|1fgoPb098z3yoTzsm@7kr8;ktW2NK1i|_%@MFVTR2e)lpy~b2sDFqJVdT%Q!9vxL
z2Ksk(Eo70kB|y=OJ1R&2@P9S`a|%2o;Q`pPw>R;-j2v5J1boSdd}_zv%L6P8Yh47q
z*&_6VuV(~GMwJXG^FzAf&y7SEHj>ke)W8$%;b+4`{}>t0pPhyWlw|Ke_dT5!;w-WT
f57xU+5_1cY5rPW-Gy)Ik4y&iDgn9cZZv*=uP7|tx

literal 0
HcmV?d00001

diff --git a/tct-sp02-wrt-tests/default-policy-by-directives-csp/w3c/support/COPYING b/tct-sp02-wrt-tests/default-policy-by-directives-csp/w3c/support/COPYING
new file mode 100644
index 0000000..168fbc8
--- /dev/null
+++ b/tct-sp02-wrt-tests/default-policy-by-directives-csp/w3c/support/COPYING
@@ -0,0 +1,12 @@
+CanvasTest.ttf comes from
+http://w3c-test.org/html/tests/approved/fonts/CanvasTest.ttf
+without any modification.
+
+
+These tests are copyright by W3C and/or the author listed in the test
+file. The tests are dual-licensed under the W3C Test Suite License:
+http://www.w3.org/Consortium/Legal/2008/04-testsuite-license
+and the BSD 3-clause License:
+http://www.w3.org/Consortium/Legal/2008/03-bsd-license
+under W3C's test suite licensing policy:
+http://www.w3.org/Consortium/Legal/2008/04-testsuite-copyright
diff --git a/tct-sp02-wrt-tests/default-policy-by-directives-csp/w3c/support/CanvasTest.ttf b/tct-sp02-wrt-tests/default-policy-by-directives-csp/w3c/support/CanvasTest.ttf
new file mode 100644
index 0000000000000000000000000000000000000000..9023592ef5aa83a03dd6957398897a585062ca57
GIT binary patch
literal 2528
zcmds3+iM(E9RAMC>}--IZHkSlbcJb}Hmx+fn~4|=c}SaNsWzb@-3F9mI_^#~3%fJR
z?rbg~7_kpEQi_7Nf1zrjK~Q`sQnW2nkwV|<gAbyhR{EeXGRgX#$)w$u2)^n$`R(t1
zoilR+0bo0pq2kQZBPYlHdRj4o=2s~_mdRu%PF-EOLH;Z9i4!MN=8IxB1qg@ybgpET
z_xRh7lmC%$Iydhd=u*xB>M-@%oK-E?>x_(MpM29?acOqAH}eAZX8>i{v90{QD@UK8
z?l;0S4h7BS^-meAn|!xZ@)uj54c;RECHbzRm$TF>nv6e6K2fq3%b3Ch^~cB?u2r(v
zkH7ad5c`2P>9SY#cXvOjFn>GsdB|P~`n~De%#NWyu}z}@xPEE<^GzId1b6hq`YrNJ
zpl7(G&#mANPHPA{)^6*E!$^@bL|Q0mLqc}TB|Swb8%8pe2%7wX7*!uCHz~QWfyJ-r
z7tPW^=Wn!Ro%h$|>{uSdXvUa|I&fOQrS7LPvS9~Z(v&zMA=;65&=C=`DhY|mZ<?Hp
zkf7rraZ}W78w`x`nQ>&Kj!3HhbNxDPn<$e@rAG|9>`>_U%Yaa|m@d0+T+9$}<hP=m
znp?KDZl(B-$inlEr?^M)G8XX;KIZ-c*ANI(40BF=KEhNka&mDbFAJoGR^uA(nwRz1
z_d~0yLK2r%DUM0;YFrn=(5jH~{+)Yw_Vn-E*CpD2zj;%+xHjFT%*vrBL_&P0+{HHF
zv4PHk&Uk0MC*CuV$Xs~s)bh&YoAbv#<?PJ)_fNfhZf0fWrL+G>A07}*9%}w^Ondom
zl3bI=hUcy>--uAx7wLGEX&Kzn_%3s9JFtg_4YL!pi){|FXP{H;ZW!kJ85v$FZVvZc
z=7R1t%y+FTKz4K3D>LVrE9j_0Kg^W>kV`b=3OX8csX3V|_H9EhakU|rxWPtGG$xDs
zeRLLqoPhkgUkcxKN!R$Lr8Sp8i&%_ketg8+5v}5Y_$i__v?%)`I)-*-GNN_L7dTC!
z$#2##gbi9?mv|+j6|{;sB3i|`_#mP+>{8kyItD{YMzl`3g%NltV+j=$Fb4-d3>-ub
zhlow2(MK>aNlgJoLYZ6^7Cnmetngdg!aW6>yiIwPzj@l!;1b)kFc{MzW$@m3p1uag
z87D`H8(I%iBJ=u;J%|+dLb#J*WgAu=<5fZ*DXp;5R9MY}C{;>IjO(NK5lxbD9RfzY
z@=~QR=lI6K+#$nE_oa<Vr%)`EjjXj)^eV}gmMObvTU9%6)ZDyXF?`21CZ5k4<At2<
zR_#H<@%{2(Dz&h%ko3wFd9_N;PI{HORB^+knkp6i-iS$-9hsI>aWNmxCd;m?tPvxY
zJ8xC9c9rx5g?W}<V*{A5^Mx95hJCuUlvwsF=Vx--@@dG4Z54GxV`6|aFhkgQe#m&P
zpJA1@VJ6eYpz$C(8FQf5?3L5_7o|?KjtV;{gw+|WMrM#z$!+jo6uVL_c&?F7_a)Qm
zG$mUV`cV7P9aeuG{XEx#@bGFQD}*9cp@|r8Ko#BCj|1qz!FbIrFw1C!pNsI32p^5`
zh>XCSRSBcZdsV~Z&>YL1E97mjWcg0TE4dJ(nei;|UEZ=>^4@JlJ9c3=csI~@nRO6C
WZTNf5{_GpcUH|0vRERIFfAlvXi@|mP

literal 0
HcmV?d00001

diff --git a/tct-sp02-wrt-tests/default-policy-by-directives-report-only/config.xml b/tct-sp02-wrt-tests/default-policy-by-directives-report-only/config.xml
new file mode 100644
index 0000000..aee31ab
--- /dev/null
+++ b/tct-sp02-wrt-tests/default-policy-by-directives-report-only/config.xml
@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<widget xmlns="http://www.w3.org/ns/widgets" xmlns:tizen="http://tizen.org/ns/widgets" id="http://tizen.org/default-policy-by-directives-report-only" version="1.0.0" viewmodes="maximized">
+    <tizen:content-security-policy-report-only></tizen:content-security-policy-report-only>
+    <tizen:application id="wrt8dpb005.DefaultPolicyByDirectivesReportOnly" package="wrt8dpb005" required_version="2.2"/>
+    <content src="index.html"/>
+    <icon src="custom.png"/>
+    <name>default-policy-by-directives-report-only</name>
+    <tizen:setting install-location="auto"/>
+</widget>
diff --git a/tct-sp02-wrt-tests/default-policy-by-directives-report-only/custom.png b/tct-sp02-wrt-tests/default-policy-by-directives-report-only/custom.png
new file mode 100644
index 0000000000000000000000000000000000000000..6bdebd113e90aeb44fe9d81c9cdd825071e23af7
GIT binary patch
literal 3777
zcmV;y4nFaTP)<h;3K|Lk000e1NJLTq004jh004jp1^@s6!#-il00004b3#c}2nYxW
zd<bNS00009a7bBm000W`000W`0Ya=am;e9(9CSrkbW?9;ba!ELWdK2BZ(?O2Mrm?o
zcW-iQb09-gGzPNMpa1{>6?8>dbVG7wVRUJ4ZXi@?ZDjy6F)uhTFgZ_y%On5*4jM^B
zK~#90?VZ1G<K`L1zx*MQl6|HwDIgCASOp54hXAJ`Ks^LF1;}vQxj=#3R&{E(-hZIe
z*v;8GYD|C>@okr>^5y^?Bp`ziNKhGQ0Sir1@qCg<iWEDLlu3#bN%5!T_X8Mb>m>3O
zpYQv;&-*^lOH$Y|sx6@cpbns6zGVGd18@}ZFxLPE=I>qGzrA5w97StkzM!&hKvb$N
zp#j6l4H$+O5<aB}pa(+`-C<koCVaj`**XDKTS5)MDGY-@&$KajyoMo&^I=;YWZRT*
zY=r=9MsEUml4)c7=>zCsOT>_C0aROpW%RuC^su}J&>6PH^Q;@Pirfjn4C0yqULttV
zmUpfJoWT%7u7b$i2*5P_OY<k`KrSmp7(zJ9ix6@lfND#4h21v18xe*GUS-{oOa)+$
z@n_f_S09#Z057wQ5i${g8P#_HJk8?#IphLBGmBXRllBQsci#c<IPG)im>PgT?l*XT
zd?9z!JaK9sfb{ynr0NY)5r8??cW{4#yr_sUM38uFKqq~IYD+i+@C}IZ!yo|o#=Lfk
zl9&fD=k@0xE<Y+408W!yH%P<-R9iwFMskE0KRQnVbj@oTJF$BJoAHUuj~5X@W7rmZ
zaUL{Q0TAOSPV6FxZ3r+6GrAzgPZ9yfaL|bBfU$T0((_X%Hct>)0L1v25sL^S34j<s
zb0UjiV*!}+{4VleqP6SvVTfR(b%H2C;5mr#^S~1rw%CY`vVrCj<>#B8ln^_${RaPV
zd?CLH`@zsdfSK6&ChX@3sqnk738YX0FjKlckf1NGhydzgQpsUsfDVZ9^Naw)Mu7<&
z1DKUOe+bteLI%|K8$1=XvMA6HKwSUU5qKyFIs|k;jK56;9twN~U`G8UufKgfHEp++
zARZv`vLr%c_}Xr55NHN|+qyB6095<}!j(awxz;}b8T+>#5kPHKu3+5|aG&<-?J@!k
zTYBQ@0Z8xPIaYdsRUV)TV*Fh~fML@mRtaFG%OGqmo;F<)fH`-(uiLeEnIo@t0WS~G
zOuj9IjA*)Fa0G$on*YC2Y78M8er?YYxIKXH(jj5%aoE@`fM$B_AY??-{>NenAnyNO
zu^0yI9)P(2`@_Q4b^$cfZwDbG8rCm%0g$ZU{b6Bi3Rvvy{YO@<*%s6r4Rc9f{LNHo
zFqLQ<taVAp>_&6ER;;m+jv0_ohi$QIov9JmQI&xTWuW@LkLD?`hfFLN5dh??nd3qh
z4jFLAg~-QM1}dc94ARvMx~zM?hpjRw95N`>7?kQo-(%{Mj%iQ9v^Rq~)I8rqag^hj
zaa<!84FJgqV0<Bm`V1q`;OhnKop7M|&9*DvzLB7bbH_2G3gGsQgvodQ-$fm2P=^|(
zefSDMz0olGa^h&K7rLxNxmKZE8=Yyt!3S@6FdD#J43NnEXM&=MbBr%!{L&diz47i5
z>yWQzOBYlV=a8>v8@K7*`P9?+#UmEQBNl8m{H{9nM#C?i@lsnEfnFS!;!?YHV;ulk
zGxwiZ>bH2rqEK^QEcIp%^+sE|5b98acs|94f8Gyuj%m-^(9_;*BQG$ylrilqj@R~{
za!Vdcmvkrt74nt3c8IXvJNk0scn@1;@ZcH0H0G-}8kB*$c8G`pq1qBEEE4Yhg&MQc
zeJKMKw{IlJmsE!uradLlSPB5zXb$<Uw*cg~Gw6~YdRTeib@u#&=OxefP&@_hxB%|B
zfCH4)dYoxbaR{ERGWejm=h-&)kO6zhpnSqX8_l6htA!PjI*knH|HT?>Tm+Zfldt@P
zNQ-GtiS++&l!5B#rNtvQuo%~Q8~1m5@Qe>6Or}DEJxuJD&W*(H6zT`XQ%e^($SlG_
zvbldopiz3_Jl5ngya4RDhp$bsf;o$nrh2|)>H#dcW9P+KH<sFQ2Y-CM0KV?*g_<}I
zB`7z#wDCuMj+>ZU4@34IAPVl_uT(FhSYyEm&aWk{2ok-ZdG~O%`Aou&dzh1AI&M^G
z8275*I^4k@_qecFEGeHjhXLto7P!Z`U9%?6@$P&Yv9-&`y?rBXH06z%8jT#(|G8as
z@yLICbO(1Oo9lN6W4f#d?s4oPv*baheZ`o<MR40*!`v^OacmxDLymGW1h`$a`(pWh
z#=YvtRA_LIogxSm3?7`8mR^(J&hYc!-fwKMQoXn&Y+cqd`f7rA=hMt$g3JZ*zAG&)
z2>C7Ecm;oMO0L(`p$2WVe)-j+SYvVUd|3pVILGL#3I5j^2R@da%8Rn+3gWb{;J;_L
zm|TWiLXU$?1@OKrE#(c$zvX-rAMQD|*F2p&E-bn7FkYZkFQW2!*>h=DxmNMh7q_^5
zBZca@6i?xU=H8Nb0t|0(`>lkZ&Tb>kTEfEYH~3d^9#9#mm|fomH^mz32!M>G(;39C
zr;y(|zbIQ}P<c^adwgBeA^v@`_?vrNK>1_ug_^mfJKCcDG{@d2T;T7*{)z$rQ32}B
z+%tJI`;P|c``IF^83c-@z<*Q#%~P2DTLWBipf2l>`ZMSfP<+IIVw24cBrbs2wTAJ9
zy!es&Gblf*OLKkhaRCoslzqSO^q&fpAMb>-_X&r>ij^{^LSyost=DVDYpdSx1#K==
zF%=rhV70-3aEm*IM=bb{3eZM6w4c4jCI6tJ_=o|$pPZvkTmZfe5NJGj#^b?fd?2-p
zUr!g}p*RYa->>!<G*4kRa3`IN9vGIwA!B$N7M|a4cCBGP(nBSmXx?Z`vBpBZnPWb7
zc8d8}hxGjn+;7;#M3A}w7{Ta)e7%5!XC>@^#s}_^%0PAW=<>%LxZn8qI{Q$g{X9ph
zUR+x62?E7ZDAtVJfY-2~4mHp`g~Fq7%e+j5M)~8S_pqP=$`2|^^<pB!LE;P2dr!I8
ziW%I~MP1VIz8ik6cG^=SwTY?Fc-Y*-<Wk1%x6bpw@5+X;HV|0(gadb6!05|~BSWf*
zbBr(LB#J_k7eHL-lD?FqcmEv}sW*$|VwTPNfOoI&Rtk05DEBI#1P?atFclgfH1~|+
z7@G(tm(fJK3L3@(jB`)ewC*~hCW!2m>cyoDq%w%M#7pti(rieV^(2;#uUQy(0?B+i
z*bn<0p5myb^?pC3o^$a?>dj(H$#Tc6!yCo1s>f7luvNz41?KUu77n&z2v7#9bLH>2
z5ZWCw724sdr+p=GQHCFJ9K(xE0@cvxfbrCiT;mS@!uEc^5RH3PFRo$5-Q(jb;db}<
z1WLoZndbuh&?RRkkF7Erl}J%M1>QABUsX&R7WdM0992ZxXzp<Tj1bTM2{*a-0Pbqr
zO?v;T&#FUhDX@BXKE>ox4m^%edx~THr?_RIDFYSn&ZmI`Ppg91j#t7f2D&VayMX5w
zckt)FxM8qz{q}fba;Z4dzuIVyX<xzZw-UI=1#rhkF2mjXbV<kfQeH}C38y8`m|)sB
zgkq(xt>e1!s+4A{t1GJ`(qo5haa3&yB64_JIQ2$zTnPTS5INu~pA;R7H`3J%2Ut%1
z0!9shRdr--)dGyM*{fdv;Cab+DOeNdn0zNMHl46lW)bYoZnUKwiB&$H0OGJMjx1T{
z(hIoLw^7``g*$a@E!_BF->T&{KE+X}d|nP*K5j=HYK!A~CCFCo9f*M*aJLfJMNGGZ
zce}MHb8YsJ#$Lr(QL{FaMup-j96T>M3Oel5t;&nCxxv+l58UP4c8W)=QHkv1nTj<Q
zAO30IaokmV0~vuvvBsi&QcQ9`0AR*`WP5l3+*`Qg5~F*&dEt;rY)!#~Pls)>YrjWO
zE(+BN=`d`I6yPigd!12R2<fx1wOs(+^xHwmh_3aET>u+Df0nRyENs0HfO+4zeip4E
zq)LC?tztW=HieJ{9s3_{0gz!}_i@<RApp}gklDcQ^4k40QLp@BCzYlUvY_LBVbw#U
z2H1i!F+wP=hi$RuesNWW0eM>J?%`?ERRZY1c+?nSHxRL6X!jI=`FuIz1$KwCO`aTj
z2I2*F0TF9D^GX2_FR(ML?ES!+heunG8NpWL8Ts1@QfEw_BD%f!+AdJ}Nwp<(5mU(+
zAvG?BZL#6^rl30wnjit;HX$P5BLD*xwv8|3(SC#Hk%QaH5(4qpVOtE8*b7yGNQQ!~
zAdu^~2)o&=2{IJqnZT~!B9s8kRAQ(T5K^V-PWSo|y10FOAz$q`_=f;a!hV*JC|?ZQ
zV(5jtjdvlCcpz7V8u#r)*>HXeQbd{u`iSt{=ScgIsx6@oqsBaUJB#lLB7nxQEpEKI
zH}Xa_B7)3_Y<wUF0RTh<84!!{ftYR=Z#Lu<WQ`yVL;$C87$1nq16UAGkT|jRe2dsO
zqZ1J%M(oB15_n>W*}w+K6fsWvNWl0&0v^D^d?@uf$YN1cE?|uLE6ci~kof&bsx9FR
zz+aL+&yMoNuq`H9k(J5~X{s&Z6h>V-i3@@u!bt2SzF9Z5I}%k}LJfup$dIs}3v7_p
z+mzG<U{P%euV54_5^vx{gi*r%D$SFoE&zad0}oQ|^>#85fQ1<woZ<fNJGch$GL5l*
z6`2aa;vNnQnYeo|av=a<v2O4ZyDbE3pWfQ-T4|CS0a%zqXu=S}t_%&=Fbv<xi{UMD
zCjdKUjL-z|JmaQp%4--#&+W~(axDN0bJk#q;Yp^A@uv@ChI5`pR3DbD5P%(<7#hfr
zXLt=G1G*JPx3hHuaAV%;-ukH{`2bRc@vwz1fbOs@b`w5dqHMhY+?YXR9e4W}t$%9>
r9#me#c%UY5cVp!)fL`8$xTyRe`)Jg&1RiM`00000NkvXXu0mjfhlveJ

literal 0
HcmV?d00001

diff --git a/tct-sp02-wrt-tests/default-policy-by-directives-report-only/index.html b/tct-sp02-wrt-tests/default-policy-by-directives-report-only/index.html
new file mode 100644
index 0000000..6cfe693
--- /dev/null
+++ b/tct-sp02-wrt-tests/default-policy-by-directives-report-only/index.html
@@ -0,0 +1,109 @@
+<!DOCTYPE html>
+<!--
+Copyright (c) 2012 Intel Corporation.
+
+Redistribution and use in source and binary forms, with or without modification,
+are permitted provided that the following conditions are met:
+
+* Redistributions of works must retain the original copyright notice, this list
+  of conditions and the following disclaimer.
+* Redistributions in binary form must reproduce the original copyright notice,
+  this list of conditions and the following disclaimer in the documentation
+  and/or other materials provided with the distribution.
+* Neither the name of Intel Corporation nor the names of its contributors
+  may be used to endorse or promote products derived from this work without
+  specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY INTEL CORPORATION "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL INTEL CORPORATION BE LIABLE FOR ANY DIRECT,
+INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
+BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY
+OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
+NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
+EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+Authors:
+        yunfeix.hao <yunfeix.hao@intel.com>
+
+-->
+
+<html>
+  <head>
+    <title>WRT Test: default-policy-by-directives-report-only</title>
+    <link rel="author" title="Intel" href="http://www.intel.com" />
+    <link rel="help" href="http://www.w3.org/TR/CSP" />
+    <meta name="flags" content="" />
+    <meta name="assert" content="Check that default CSP policy enforced by WRT is default-src '*'; script-src 'self'; style-src 'self'; object-src 'none'." />
+    <meta charset="utf-8">
+    <style>body{ background:red }</style>
+    <style>
+        @font-face {
+            font-family: Canvas;
+            src: url("w3c/support/CanvasTest.ttf");
+        }
+        #test {
+            font-family: Canvas;
+        }
+    </style>
+  </head>
+  <body onload="test()" id="body">
+    <h1 id="verdict">FAIL</h1> 
+    <p id="reason">Test did not run.</p>
+    <iframe src="support/blue-100x100.png"></iframe>
+    <img src="support/blue-100x100.png"/>
+    <video width="100" height="100" src="support/red-green.theora.ogv"/>
+    <object data="support/red-100x100.png"/>
+    <h3></h3>
+    <script src="support/csp.js"></script>
+    <script language="javascript" type="text/javascript">
+      var id = "default-policy-by-directives-report-only";
+      var reason  = document.getElementById("reason");
+      var body    = document.getElementById("body");
+      var verdict = document.getElementById("verdict");
+      var result = false;
+      var why;
+
+      /* Called if the test passed */
+      function pass(excuse) {
+        body.style.backgroundColor = "green";
+        verdict.innerHTML = "PASS";
+        reason.innerHTML  = excuse;
+      }
+
+      /* Called if the test failed */
+      function fail(excuse) {
+        reason.innerHTML = excuse;
+      }
+
+      /*Called to perform the test */
+      function test() {
+        try {
+          var xhr = new XMLHttpRequest();
+          xhr.open("GET", "support/csp.js");
+          var h3 = document.querySelector("h3");
+          var display = getComputedStyle(h3)["display"];
+
+          if(X == 10 && display != "inline") {
+            result = true;
+          } else {
+            result = false;	
+          }
+
+          if(result) {
+            why = "Test "+ id +" passed because The default CSP policy enforced by WRT is default-src '*'; script-src 'self'; style-src 'self'; object-src 'none'";
+            pass(why);
+          } else {
+            why = "Test "+ id +" failed because The default CSP policy enforced by WRT is not default-src '*'; script-src 'self'; style-src 'self'; object-src 'none'";
+            fail(why);
+          }
+        } catch(e) {
+          why = "Test "+ id +" failed by throwing the following exception: " + e;
+          fail(why);
+        }
+      } 
+    </script>
+  </body>
+</html>
diff --git a/tct-sp02-wrt-tests/default-policy-by-directives-report-only/support/COPYING b/tct-sp02-wrt-tests/default-policy-by-directives-report-only/support/COPYING
new file mode 100644
index 0000000..75fc3d7
--- /dev/null
+++ b/tct-sp02-wrt-tests/default-policy-by-directives-report-only/support/COPYING
@@ -0,0 +1,64 @@
+blue-100x100.png
+is created by Windows Paint.
+
+red-100x100.png
+is created by Windows Paint.
+
+
+Copyright (c) 2013 Intel Corporation.
+
+Redistribution and use in source and binary forms, with or without modification,
+are permitted provided that the following conditions are met:
+
+* Redistributions of works must retain the original copyright notice, this list
+  of conditions and the following disclaimer.
+* Redistributions in binary form must reproduce the original copyright notice,
+  this list of conditions and the following disclaimer in the documentation
+  and/or other materials provided with the distribution.
+* Neither the name of Intel Corporation nor the names of its contributors
+  may be used to endorse or promote products derived from this work without
+  specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY INTEL CORPORATION "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL INTEL CORPORATION BE LIABLE FOR ANY DIRECT,
+INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
+BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY
+OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
+NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
+EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+Authors:
+        Zhang, Zhiqiang <zhiqiang.zhang@intel.com>
+        Hao, Yunfei <yunfeix.hao@intel.com>
+---------------------------------------------------------------------
+
+red-green.theora.ogv comes from
+https://www.khronos.org/registry/webgl/sdk/tests/conformance/resources/red-green.theora.ogv
+without any modification.
+
+
+Khronos Group License (MIT):
+
+Copyright (c) 2012 The Khronos Group Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a
+copy of this software and/or associated documentation files (the
+"Materials"), to deal in the Materials without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Materials, and to
+permit persons to whom the Materials are furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be included
+in all copies or substantial portions of the Materials.
+
+THE MATERIALS ARE PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+MATERIALS OR THE USE OR OTHER DEALINGS IN THE MATERIALS.
diff --git a/tct-sp02-wrt-tests/default-policy-by-directives-report-only/support/blue-100x100.png b/tct-sp02-wrt-tests/default-policy-by-directives-report-only/support/blue-100x100.png
new file mode 100644
index 0000000000000000000000000000000000000000..584f9c3cd416b8c73e3afe63a9e58d1773333c27
GIT binary patch
literal 385
zcmeAS@N?(olHy`uVBq!ia0vp^DIm<j1SJ1AFfjuumUKs7M+SzC{oH>NS%G}c0*}aI
z1_r)^Ak4U9V)k1G21aF17srr_xVKj}@-`TVI6H3of8hW}<)qWy8oJ`w?9ct)_uS^*
zRi^(D=O6EmJ`nLRtS5Dib=cSck2l3kJH0CFStXC*k%Dup#F9D`+d|LU^eeVWoQu5b
z1Qgw{YUXppBLaslS4RQmB*IKT+q6j}S)_+@gG5)Q%{wmO%=3Ir7EmrJ;_8{t5=k8o
z=Y;AW0gA4kRVnApV>oB?s#c(AVyN-?WS|knVOxQ6hHL0&=?#g0)s^PlHTiQz6_XP`
RJOG9vgQu&X%Q~loCICyWnfw3%

literal 0
HcmV?d00001

diff --git a/tct-sp02-wrt-tests/default-policy-by-directives-report-only/support/csp.js b/tct-sp02-wrt-tests/default-policy-by-directives-report-only/support/csp.js
new file mode 100644
index 0000000..de46ff6
--- /dev/null
+++ b/tct-sp02-wrt-tests/default-policy-by-directives-report-only/support/csp.js
@@ -0,0 +1,33 @@
+/*
+Copyright (c) 2013 Intel Corporation.
+
+Redistribution and use in source and binary forms, with or without modification,
+are permitted provided that the following conditions are met:
+
+* Redistributions of works must retain the original copyright notice, this list
+  of conditions and the following disclaimer.
+* Redistributions in binary form must reproduce the original copyright notice,
+  this list of conditions and the following disclaimer in the documentation
+  and/or other materials provided with the distribution.
+* Neither the name of Intel Corporation nor the names of its contributors
+  may be used to endorse or promote products derived from this work without
+  specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY INTEL CORPORATION "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL INTEL CORPORATION BE LIABLE FOR ANY DIRECT,
+INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
+BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY
+OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
+NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
+EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+Authors:
+        Zhang, Zhiqiang <zhiqiang.zhang@intel.com>
+
+*/
+
+var X = 10;
+var Y = eval(X + 17);
\ No newline at end of file
diff --git a/tct-sp02-wrt-tests/default-policy-by-directives-report-only/support/red-100x100.png b/tct-sp02-wrt-tests/default-policy-by-directives-report-only/support/red-100x100.png
new file mode 100644
index 0000000000000000000000000000000000000000..d13fc8068293d8be1864e608728faa28206e1fe7
GIT binary patch
literal 401
zcmeAS@N?(olHy`uVBq!ia0vp^DIm<j1SJ1AFfjuu#^NA%Cx&(BWL^R}Ea{HEjtmSN
z`?>!lvI6;>1s;*b3=DjSL74G){tBRWMm0|t$B>G+x7QAGHaG}42XcSR_&@h%^Rxs$
zMFswEJK7(9o;>rho&I~}#>bEC@5eDEupVUMUgIZd+#PvlR(^`1h_j){VFlKN#;YrN
z(hR#JKZ~4UFPOq+%ODmp_fm@3<{7EdY?=%}9jOK&9m^B!8Wx+pVBB!v)fBbOGmh%q
zHt=AKNGR26jy#ie&4%?eqs&rA{sz{t<t8(a>ZILlbL2X}v^rSwOp@5<XPPtkA87Da
zG3actT6$6^&G57tPY}qSQwczOO#KhmFt}%4U<Nux(--8FZHW_@fcAv20qt2+$@Prc
z!mC*h<djS!pi?&SHj9AlF#<Xw?QF1t{DDBJFAPAZcufX6Wm>Mp5|BMp59*}-y|RW~
YL*qk<tyknzU@$Uxy85}Sb4q9e07VRv<^TWy

literal 0
HcmV?d00001

diff --git a/tct-sp02-wrt-tests/default-policy-by-directives-report-only/support/red-green.theora.ogv b/tct-sp02-wrt-tests/default-policy-by-directives-report-only/support/red-green.theora.ogv
new file mode 100644
index 0000000000000000000000000000000000000000..1543915a1080c8bac5ded8b16554baec290d1c81
GIT binary patch
literal 10292
zcmeG?c|6o>_usLOHOtt=3{#Ay3@XHJOx7tH!>CcJ!Nib~LAh;X4M{cGsqAIKjS#Jt
zi|jk4jS7`gm&&~@*YEkx=w99T{@(Zf^uB-nKELyMJm)#*JkL4LInVwbn|ys;ApvLs
zs`u~<zZ5iFM-X-~S$+(<4<z_i4Dj>C#NW`1szRH-(Jk%EmyOljxQEbVhxjq}2Ga!v
z5Rfp0gdj2mv0-_r5d;ao;MGJxkhvb>FIv**JQ<Xd^^$<lK!oiL_F}SNmH_)Y1kD40
z-XVCn2Ent>uMTq9H=q(KFBs4jAd`V}UVHa2AOpaHy9WDZ6bdo`FaF{r%maOd*6-aD
z!q^jH=oTKtut0|~eHeRJ^8Jt!U#t)AB&-7N5)81}#qc%W-|C}>`Y`vd<a;C~{%z;s
z9>Q8)I6BNoN5O7>g;Npy9_Rz<7G{v&icP`3=-o^&J{OH&fkzt~8JQcI85^T@-TXpX
zdl<WY=s36w+ThRDdHp6ETZ+}LU4cOiUt@kNL!%YOtMyr7d+@8xjZHN`HP=m4%6i)!
zn_L~NT^+2<SDTuzGRFHDnfRE~*BBc|@|)f2)SavC3{b8rb|lHLvM2C~l;i>o5})WL
z6OBO<fEqr?29~+{a_)R~m-~FceCzHBz4v~X+;rt}SPz-s!_Bi!>~a-5P(j6=iN{8&
zAP-qCO%lnsX5VnvLx~A_VE{v2GFG6T5ND>KI5NIE+~8yrePv5jN_CglPwoj-#0X=K
zZSIoEGZ{5Q45PH;%P1LU90$y)V~zE9NBvEeC7Qf)38(C|WB{Y?&Q1dqGAe>_`R#uS
zb#=dBtgXpCJ!7&M7Z<|lC?H*2$YTguJismpSvYrb!SE;-7e2*f@iM5c9ASOBybiR-
zxYXBQ9_<BWeSO^+0#7gR?X8!^18Qun*E*uSz87GS0|W{HU<6&xMMOrK^wiaj;q&tw
zgFySpsAO06m@K`2RjA+?#>=(9ZYZQT(j-J!@t8s*N@zT6e_E_tOw$J)5xX$_e+n3k
z%jsMI7;8F=a$V>=GMAt8SpPJW#n5MnM4~muI#LV9^hh~?h}JVO^{>HN78Chl_3G7l
zj7!0C7)RvC0<_xr9Zdae!2dZC-&ewb0PKr6UA}<o`BZ%`j|s*KmI2hefX4XL*cguq
z22fU3)_PxV1A>nPFg!{?%LQf%Xi;4Fh~mPdD3sGMlS1L-EudTk0%0A|AP~VvQ42_j
z$BYsZLI4>+LI^$*5#UiG$OVLi4sG8Sa(MfLSL;@mT~^(tb0|iweo+2kaEI-+q&0O%
z#^r2o)|YcW4pK}z%9`#*i`}Vzy>w$*7rp9|R3evh<J0~nt!v|$8J@?>g;t)nkG(|R
z?Q`Qu@U+)v`^s<~u{o-Pb;3k3KxNI5CdqwKBbHOOn7Xzh@4eaU65igBo4xv3XK9f}
z?<B>hS>WZ+E?08EEfqtI{fCGjQNNUTT-PQ{lMmXT4bBSOe|fX8ULx`qcK*0+N$`>y
zo3&XxrZG%4$)=Q?HO{1G<hi{TocC@i$XPSzl#;tE)+ES!MifM}J~?(h^zpn;^UPhG
z=#{$4skKQ4?%qq-ZAo?~Z2DTO<_8LE@2PJ&q^Tp+*IIeNaMa}Gb47O{5AW6#SR_`e
zapRT9fbG2C-QNz2)keSixOHb~(DGELkS4^0^BbxI8#_Gp;HLBPG=HhCD|ESmH4^$#
z>zXv|j|6c!$-=#7eSXg05tDMfwY6}>{%j3P=GeaJ-I^}~ZFP}lK}}OM+mw^o9ryQR
zRu3FbPi)Lx_tB?XHG!-hO`~0#eeF1LWF*?A_VRNNpE+lV^j}YRhbmAEN_OZTe#0J#
zpC2wdV5fD8(TI95vSMxjft?alw2SPQ8fu5G<vQzcJr^7n_b$bz&;GX}JNXHvuClsg
zvlsRSCQSB-`!oH5#+9A)N3gTo64!L7*2aD~lXACtRQvv%=sp48$_+Ya-7c8u^cd1>
zmaJVZzWf7CD?sY?q<+(`o#O*P`qa#yOepqffIfaOl7IFfU}QyhgFz_^F{bYof0JV+
zLAyOh)k^z$@7m92oBa$F9z10GZw$1rXq9(9PBV{g{utwySZmQG|9OwJY;==U)d$bD
z<(>s<X<c&Rike70irpKD^&fDSrQY!^EArN}f;v>m_jl|{)Bhb+lkL@+hxLi>dtKVH
z=Ip1@kAo?ZaY6I@(#URl1#A7p3P+s$CdRVY)csKT`MtX57WeSz*B#}f6fLq;Q5wxO
z=BT}B?Sab1TlPcxcwfzDV$*xcG*8lgv1x6g&Z;y=<CyxRx1?iK#zr0|ZS?vbLDkXP
znC|^dWO|8LW$26&E3OSueTBJVf7us?7uUi4=J{aJCHWdFzA$`kXTqM*<4glf?zQFX
z#<*QYWZ8|3Ctf`)CU`9770T(?geK-%3y%*WhvM`oqd(%+{9B7c=tslUa^0(}e)hYj
zu>qYmUn{y~)kCWZ9jw#ESdq}<IO=KE`U`Z^ii4VycRe&^err_gxVmnw{ZA&x^|$%G
zkXfF_w8|IAOdPHBxFtBLc{N)KB_~&%wc}93sJ+smaT<fP<w_{>P`fx)^I9x|rJ*)N
zV;+zz3M|RAKd+P2Yn2!D@g-HgLJDS`YySOhSiIelrSyjT;-h=KC7+0P|K>`rl6-n)
zM8w-ME5IPb;#Nh|BX#A`1gqv}^JU}0wrHQ#gC-ltbCZ@{OQ`sHorbm*XHM}%PpQ&H
z71NIU+qO8Z^HaF%N<RLy*j$tIDP*si0>$EX^n~)v50#kw+dY!KA|nM(D^8EUU@#u-
z!9AFbxs6aHKSZ>>J>{ey7}8~_dEMKZ;q&Ili<Doz999qNJ6>sv+gcO){0LoD|MTXZ
z=Tk0Sw<bR-G!hNS8@+nrQQU@B$<8WL-|qCW`D3^NyNdFgB=TF?ci8Rq$1&B#nZ7H3
zuQPYP7Ww$nfpR79HmVtRC8;j3IJwiL`Pqj!7Z&t>=H!sO-J8;u6rAE0?eh*YB_)YU
zXN;Lyf`R+4|DLz>!UlV_xGv(0;~gqq%&b7atM?QL6pQI5rsMptF+V$fMxCUa=3f-M
z8+0_S@n9ltmbTNzfix26{ic0rK(C;t{kDJ+?ARGow;gYfObtuot!o1l?u2Jk9qb%P
zOp`!X-kd=YW_C2JZRKl?_svfZmTZQ^@weZ7t}Dv*e}h1G^z9mHPnFf4Zm3-OquHl@
zwLL$#;)?>SQtZT5+P7uKE%~A3^7*S*72h63Y45W<Zyry@A~zkatSEo%QX?)HNHgtL
zlwX<pM&#+csR+=_C^vOYC)Q7T6XT;C*JhJpDgE&_q?}oDOzZHMX{sZ`hsYYM<|=Qm
zX;;knWYX>}y8Rc@g`r3`JQ4+6mf@IN&z3yA%#b<Xt}u-&7Cc5iDL+$Iw`1vJL-J0C
zWlVf^?RcWoqwAkt$!{jz>#Veor=*<QL;QSGTSPmMv7C8svwUwIjiy8{zNmeu=7w=b
zQSgbX7BThGJi*RKCnw*qPqf+hf8?INeM%;Izid-N!?R1x8Px*~ySB{lwZ5@Ea(I4!
zOH4{6wb8(1S0HznQnx+M0&OqOCAnl>f2k#4uc%PFOrnT>^l9M6a_0Fq#qP0Js}v~g
zMB0|8M_RYVCp!mTnvdO5*>P=1>HQ1&R*Z~gm6Nqp*HIlKtUQ>$wBVNO;&bBKwnw{`
z{wRIh*+Hrb?qYevC$1~>OLs$D>4WkXZr9UjSC=J)H-079<zjTfq}aHeabj+d=3G-k
z>+hj5c8F9%6R=1mrqkZd2Uk?BLLOp2l(SX588lV?qLtYHTNJPJ6H48Wp6lTbJZV_9
zhx0iG6?LE$6UPp+kPPxYy?bhU<FCW^pMvvmZ_p3d<J$egSuYEXhA5AAYuy`uknu~|
z$q(c9M^fEqsBR~oVq>)sb<gqj=WMV1RBQ6oQ}cCO(iel$XWU{1O3?X>2)VZ#`%MBF
zZFXkspR_gIxb@ES-crqJ3Gdj#mD_IT(6)(Y#k5K)Cl)a?sw*C^6FsW+e97cw8`Yph
z(?zLtj1c6oJsCLZnBg7sFn?<gjn+2Y|Et}YPT&_bG2}?HQAVnMr%7PxfK5@}nL82h
z-i19qPrR<p-eb5<#jD?Vmr_<h$W2EnB5ITSW>SG*xCUZ|G3Q(vkpCqy$T#`M^`QKV
zcVzOhVzxt<Z)Dg^9$xpcY3KdTmY}WGmzia5DgR{jzI`vjFEIGMRF2nS%7%S?D}BX+
z{72SOP+{?t$({F@L_6{yOlyqH|ErHAgfQPKj=0_(0Y4|%S{s#rX7`+;LXZpu<&>;R
zJ$UEl+@pgL7wu68<KWWM68oMX<7z=^`sM}IgYAIFLYw+1K#&l`#vwC<M~N?Q&S|Jj
z$hxTNwZNsAc%x*M7^{>Kk15QV2gH|FlNv}VnlJ>O_yi;-8bxuy#C*+gh3Q@ixT18g
zHrxeuRtLTX9VKn?yx<I(D26K_lk|!Uk|`v^ArIE{P0@#}H`c$Rqh*Ld$=8hM2O9JR
zFnxGTSTkQA-z_x%P49Rb)n2aN*{k09i+Z>0G8egJy~c+9lvS=KR#Z3JK{x7Vs;B4v
zz`?M<!PLNEcV59gkX9Xd|J%fK9gTo;w9Pr%IF1&M^VEzZ6dhY40QtZn$<a-CYL@iO
zA!!+tvnxE+H$L-XM&|S4bK<-zU_J=(-k+lf5+)BM`G#|NdFBOXX3@W!2!40;AOeVG
z%RY5}vJb|J@*;c({zO2aU|WI>>{+HQEKB<ko0gD`t;ue!Rof)K4g&lY0fGqf2DYx2
zEoUsd<yUq0n|8`OxtKcj{~O5_6~UV?z!A*ZU8(+Tq{%5dFDz`JRyh~BUXpJKREW!c
zhR*ECob5E1&K%DvMrHNa$Gc_e)E1{_vAWDBvv+r?Jk4fx;o35qax!`{SzV5jnT7mP
zxLlTKX>lLmsZ3@|H>=P=J!W5~Xz{%*pe?N@bK+tx3Y6lLvvjIz-T3-=N?BdS+q1js
z&Bs8C_>ruDS}{*h`pqYMx>F410lN#C7;pLzz_`)xDmR~vL?2EP@j_vWFlRJEPD-E2
z!Qa6ZXq-s0BNa!HDJnXJA(1@K(GV0Zvv?L`VwJt(Fc-3e#q};0a1!*|bgy(6w;RA&
zNn@AA)a6E*^^*9?K9a$zL3i&HRTJk}W#$e6g;hfy`h{SE;|lpJ3JfaR=ajXG3U7VH
zrU!#nkrOGtc;Mb*yJeU5E=t|MsDsJOpU=F>Ox+w7NJ|U7e>KMQZs_CT!;gng>`;nj
z&{DrieAj^|5WJjt%Q4w25#N#><xCXg5AeduvEPSkIj!D$8oQwa>(pn^Ib*tM*0fjN
z7EBjc1<ziE(0)aR>uS&bRg8WrV=#<yubQ#->S0>-;m31}(s1bFl>?TImU+@shi_L-
z(i5{JZAT84##zo=ImH?0UKHp3W##1fC0s~PxDb~x8JDCRpURBS<ksfxZY!I*_Ak>P
zD+eqXkZdVf+izA*9bSDsSUeR5PP2R;t$M-k5MryecmN=%?v&&Pcq_rWPz(nts|G2C
zR5vT?zk)${X@S6|K#&RqHC8_B3+_IV<Dh3>HN<fl$2O^}CgeoAv!oPE;~bA;yu>lf
z@u|`lMcD(Yt~eEz8*4YlEzVKOqKJYMF+_rSi-dAjAn6tawp{?b;p?|T$9|}D7HXdb
z!wLhT&$MpFlrU?_C;zh?>m+E}4W|V)z|bZX0wg|NH)B~RZ&fF6`=43iw^sj)E#MI_
z)GfbY3wQ(!{g-V0H~RbkI{r^b08BfCH26~_=3?{(*k%am7}lDDcI+`_`_Ot!{Zu!~
zqiKq!Qkf$C{No*t24MyWOr`RWr%ab*ia15-e*NMOL1-orWQw>5IlzJ<>#u7FwCdR?
zpNDjbW(rvLN9z(%^vu5xEE|H@2vLX)$+r>y=u_SnMF=wEc+((g)QrPGKx_sr51jU?
zh4ET{ujb$9{>31ItqVcNfWaX3c7Y^s8i8XVv6BXM3i_!MPzboP0Ngt@(`AaHx~4wM
zAQ@q3l#FWcGj(}pmRiWnyK~xLL%+>w1~YRqW4USP>_*wV$?zhv?pfeBGa-*F0FD<B
zc40W|tNlm@(qz9oBnXX#>c-4c$HViUhv)faa@+P9w9neOpqyN()Rd=wsgv<}x|u~>
zt{yPd%{!u~R8POm1@^TSmfZ`rJ(bQ)hUe)f6cuyJBwSFo;Nk-|@L^$~6tK82uMuD#
zV0kLV@l}>h2`p4f@nkc(TrN0o1l&M{;ZTN34&0<nza1J5^&C!N&_qUow5<aCt}|MP
zfY5bFi`I)3NHwRLw-8FTLJNumb0LvV!WT+<%MrzM=^Kd-7#|8n4_7Eo)LWK9v34jd
zpcs=33sWh=m=q4F7+pZ2;DjOeQZw+k1sM}tA_UEV+nzUkXis8^B>Y4+OAb@03~n~X
zC~x?Vlgz<`i;gqtMLOW=6#8@k-WiGoeED(26^4K+;BHNPt{wvJA7@$8L<B_OM>}D+
zvyq$|FWd@H-6%X<=X4T^n2wyH@N<*#MO=SQ0gqG6{Ue^RfETA=&xL3%YtQq8!^@R`
zFO_c8;TZUW%jHfrRKsB%4yE4*K?G5%10e$;yaONK1`-goDF}k}F4IG!&*YWYfrCx}
zJ};y3NF2Cx-9Z<~5FKzar@o#32(}ww$OM#v3sr!WH^@LqZn6X>dA$E><_@95Vg&1)
zqoposXQNICE2>t=K}b<BqSkTv=U8x`i;?l}adarGQr3@Fjv|vtrB&&clj_kF4}Zhv
zXXcaWf&q_2{PJPoNnxtj@$wo)q8_el$g8APIfdeHSgjoJy6IvvX#>7lIl!oS0<Jvd
zaU5@PRc=EfzS$#Mwz)~syQFGZD^a$hsn4UdO2j*{yteADe`l?-c4C=fm3u&^FqCd-
z1`(FsHESgG(Z>9Oz%GGcKLC#~FiE`Oxd4V7SxiYZ2OR?sr`%);g*SV^ZIDdF6&57o
zCwKz*e#*o#I?Q1KxTz-hQKqt4pat*Zx~y;j_`?@aNF+m`N*Abt>w$cs1t5zHlNVZm
zW`K^70XBH`3X;FxfdT1gSd~oC<qMKI9zYFG707@g3TZ(=A#DKqU>iIsFLzrYafJhL
zGrrU#00fw#$FEm8;1K}S^XoB7fgutug|8lLyAgsAfi0V&=ygG5vqprrxXSVz-rVzn
zAj$k>ild=zq*kGFK`L>X0*g#Z&}B(eN{WeH=m~5}0zNu9%FS3bh0<Xyj$v%XiIk=&
zTQsNVr~B*WdP{;m)*6B$PKgPL=hP8IAayj>0RhDb$4bj;5fTLipFZgmfzZg)Dq6DT
z%Gl*@g0@W|(B+!CQ%fKfRW+uPQV)YIajj;GfV4&uWsVE#q7kAx58nQ)b}lGNJ|uy(
zl=q$^2tweNhgBok*qE}^muhIDF<RQ#WxOvE3%4c+g1<<>r;q`XIEAoWuERf)c8Wln
z5acK>BP-jfZhx#r)FJK;(lNeOj08?9u$2Qqq9O3>4qRfx8G`?_wh&x~0sdJV*8Bcp
zQ{KXl<)9Kz#QR+vmW2zw=oFlv?_DP#F}%inPjKV5@!Iw)%jXQIw*)-6S{ukpoite0
zsh?dveQ!8qY0vxVtq(4TzSe(GU6a4hPW8!&CglV5Q6j4k?5scDwkDbWlkOvzswTAr
zqhZt@-B+zQ^26;^XHJZ(HLQu=@#bN;p|!R19%RjHigMURBvSR|S+nuRP~7H(m8e|=
z!ZP=O{go4AcIt+~+o#T%3JFOb=)Y99f7|qiiOzI^508l!Jdk_0z0Xa*kX(`LNxVQ*
z(C5<J%8H!`9#n+Cz<}_hCplHt{*i;i7b8e{!ZzZu+oMB5^w?C0i*VH|e#gBqxQToI
zW)n(W7e&_1G3l7K?B-=tQ&U;s@28*2j@<eKuB4EIbH=S79zN{5at9x11EEXpUEs{^
zoQ8&+vcEvGu&%h#^|gG!zIyd4y&hy{KZ4G#3f$p7SQ)5k*PH3#;jslk=<9>qheBSj
zb?#d)Y19Z(q8Ui-X)6e|!OtYpR&1*c9{-m5G_|9@Q5hfgHQj!E_{-Jp!&MVKqtejV
zB(^`?IwB%Mm?mDK;G=hkdg>C!omg^=hiyD~$aX9)LUJ@hKuEVY-|nnM$T*I~${qpT
zQro(9tJ?kh_eTJ<rMguV4(rh<ZE0JI85`gN%t<kTiLHe&qep>9EJ)r92)pTW;{QmW
zJHFiCx^;ix0ze2ol&(W@%tk%Bt9ZIwLy>}!tPf4;lY$Z8J=C&4yYCrN4;;~#xNQ|B
zm$Z}2o+RjUYpHEz)c0GsP40RlC4;*zt)g*XZ}z`VeMJ4uo%_RsYgAF^fu+vg%FXx_
z5=my$7iUvGyy(BWC*$DI)tdna`wk9N=<xqD1R}WeCp)~r;P(+{(Cds6STTPGkht{U
z0sq_Kl0~ZqRutLLV7Ekyul#F%bSB(cQ$XX`W$hqSG`|_4f-i*a!>iIPR50j&v;TL-
z0gtapdy#!uk*^zh4)xXWV!U8inqMEb3qJ5cbB`pgzRRxRBD=7n&+i)=#s9R&x3*?c
zB@rMzGKV?#50${>oColKtAH~Z`jRW7`*lwu`16HucVPv-Io0{!)m`&NM&RvN6q^t3
zPYW?={?iEDfm+kejPEkCVUZCrpeU?1&_xb{WI=H;fa#!jOXT?IRE_K@HWa+`0KXg5
zMXli=*~Ql1|A%0KkH9>Dg9WZ$P;ksZ+8=&s!P_?f(13khDb1mMmmixK8G%p3-JugN
z|1fgoPb098z3yoTzsm@7kr8;ktW2NK1i|_%@MFVTR2e)lpy~b2sDFqJVdT%Q!9vxL
z2Ksk(Eo70kB|y=OJ1R&2@P9S`a|%2o;Q`pPw>R;-j2v5J1boSdd}_zv%L6P8Yh47q
z*&_6VuV(~GMwJXG^FzAf&y7SEHj>ke)W8$%;b+4`{}>t0pPhyWlw|Ke_dT5!;w-WT
f57xU+5_1cY5rPW-Gy)Ik4y&iDgn9cZZv*=uP7|tx

literal 0
HcmV?d00001

diff --git a/tct-sp02-wrt-tests/default-policy-by-directives-report-only/w3c/support/COPYING b/tct-sp02-wrt-tests/default-policy-by-directives-report-only/w3c/support/COPYING
new file mode 100644
index 0000000..168fbc8
--- /dev/null
+++ b/tct-sp02-wrt-tests/default-policy-by-directives-report-only/w3c/support/COPYING
@@ -0,0 +1,12 @@
+CanvasTest.ttf comes from
+http://w3c-test.org/html/tests/approved/fonts/CanvasTest.ttf
+without any modification.
+
+
+These tests are copyright by W3C and/or the author listed in the test
+file. The tests are dual-licensed under the W3C Test Suite License:
+http://www.w3.org/Consortium/Legal/2008/04-testsuite-license
+and the BSD 3-clause License:
+http://www.w3.org/Consortium/Legal/2008/03-bsd-license
+under W3C's test suite licensing policy:
+http://www.w3.org/Consortium/Legal/2008/04-testsuite-copyright
diff --git a/tct-sp02-wrt-tests/default-policy-by-directives-report-only/w3c/support/CanvasTest.ttf b/tct-sp02-wrt-tests/default-policy-by-directives-report-only/w3c/support/CanvasTest.ttf
new file mode 100644
index 0000000000000000000000000000000000000000..9023592ef5aa83a03dd6957398897a585062ca57
GIT binary patch
literal 2528
zcmds3+iM(E9RAMC>}--IZHkSlbcJb}Hmx+fn~4|=c}SaNsWzb@-3F9mI_^#~3%fJR
z?rbg~7_kpEQi_7Nf1zrjK~Q`sQnW2nkwV|<gAbyhR{EeXGRgX#$)w$u2)^n$`R(t1
zoilR+0bo0pq2kQZBPYlHdRj4o=2s~_mdRu%PF-EOLH;Z9i4!MN=8IxB1qg@ybgpET
z_xRh7lmC%$Iydhd=u*xB>M-@%oK-E?>x_(MpM29?acOqAH}eAZX8>i{v90{QD@UK8
z?l;0S4h7BS^-meAn|!xZ@)uj54c;RECHbzRm$TF>nv6e6K2fq3%b3Ch^~cB?u2r(v
zkH7ad5c`2P>9SY#cXvOjFn>GsdB|P~`n~De%#NWyu}z}@xPEE<^GzId1b6hq`YrNJ
zpl7(G&#mANPHPA{)^6*E!$^@bL|Q0mLqc}TB|Swb8%8pe2%7wX7*!uCHz~QWfyJ-r
z7tPW^=Wn!Ro%h$|>{uSdXvUa|I&fOQrS7LPvS9~Z(v&zMA=;65&=C=`DhY|mZ<?Hp
zkf7rraZ}W78w`x`nQ>&Kj!3HhbNxDPn<$e@rAG|9>`>_U%Yaa|m@d0+T+9$}<hP=m
znp?KDZl(B-$inlEr?^M)G8XX;KIZ-c*ANI(40BF=KEhNka&mDbFAJoGR^uA(nwRz1
z_d~0yLK2r%DUM0;YFrn=(5jH~{+)Yw_Vn-E*CpD2zj;%+xHjFT%*vrBL_&P0+{HHF
zv4PHk&Uk0MC*CuV$Xs~s)bh&YoAbv#<?PJ)_fNfhZf0fWrL+G>A07}*9%}w^Ondom
zl3bI=hUcy>--uAx7wLGEX&Kzn_%3s9JFtg_4YL!pi){|FXP{H;ZW!kJ85v$FZVvZc
z=7R1t%y+FTKz4K3D>LVrE9j_0Kg^W>kV`b=3OX8csX3V|_H9EhakU|rxWPtGG$xDs
zeRLLqoPhkgUkcxKN!R$Lr8Sp8i&%_ketg8+5v}5Y_$i__v?%)`I)-*-GNN_L7dTC!
z$#2##gbi9?mv|+j6|{;sB3i|`_#mP+>{8kyItD{YMzl`3g%NltV+j=$Fb4-d3>-ub
zhlow2(MK>aNlgJoLYZ6^7Cnmetngdg!aW6>yiIwPzj@l!;1b)kFc{MzW$@m3p1uag
z87D`H8(I%iBJ=u;J%|+dLb#J*WgAu=<5fZ*DXp;5R9MY}C{;>IjO(NK5lxbD9RfzY
z@=~QR=lI6K+#$nE_oa<Vr%)`EjjXj)^eV}gmMObvTU9%6)ZDyXF?`21CZ5k4<At2<
zR_#H<@%{2(Dz&h%ko3wFd9_N;PI{HORB^+knkp6i-iS$-9hsI>aWNmxCd;m?tPvxY
zJ8xC9c9rx5g?W}<V*{A5^Mx95hJCuUlvwsF=Vx--@@dG4Z54GxV`6|aFhkgQe#m&P
zpJA1@VJ6eYpz$C(8FQf5?3L5_7o|?KjtV;{gw+|WMrM#z$!+jo6uVL_c&?F7_a)Qm
zG$mUV`cV7P9aeuG{XEx#@bGFQD}*9cp@|r8Ko#BCj|1qz!FbIrFw1C!pNsI32p^5`
zh>XCSRSBcZdsV~Z&>YL1E97mjWcg0TE4dJ(nei;|UEZ=>^4@JlJ9c3=csI~@nRO6C
WZTNf5{_GpcUH|0vRERIFfAlvXi@|mP

literal 0
HcmV?d00001

diff --git a/tct-sp02-wrt-tests/enforce-csp-to-resource/config.xml b/tct-sp02-wrt-tests/enforce-csp-to-resource/config.xml
new file mode 100644
index 0000000..bea399e
--- /dev/null
+++ b/tct-sp02-wrt-tests/enforce-csp-to-resource/config.xml
@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<widget xmlns="http://www.w3.org/ns/widgets" xmlns:tizen="http://tizen.org/ns/widgets" id="http://tizen.org/enforce-csp-to-resource" version="1.0.0" viewmodes="maximized">
+    <tizen:content-security-policy>connect-src *</tizen:content-security-policy>
+    <tizen:application id="wrt8ect001.EnforceCspToResource" package="wrt8ect001" required_version="2.2"/>
+    <content src="index.html"/>
+    <icon src="custom.png"/>
+    <name>enforce-csp-to-resource</name>
+    <tizen:setting install-location="auto"/>
+</widget>
diff --git a/tct-sp02-wrt-tests/enforce-csp-to-resource/custom.png b/tct-sp02-wrt-tests/enforce-csp-to-resource/custom.png
new file mode 100644
index 0000000000000000000000000000000000000000..6bdebd113e90aeb44fe9d81c9cdd825071e23af7
GIT binary patch
literal 3777
zcmV;y4nFaTP)<h;3K|Lk000e1NJLTq004jh004jp1^@s6!#-il00004b3#c}2nYxW
zd<bNS00009a7bBm000W`000W`0Ya=am;e9(9CSrkbW?9;ba!ELWdK2BZ(?O2Mrm?o
zcW-iQb09-gGzPNMpa1{>6?8>dbVG7wVRUJ4ZXi@?ZDjy6F)uhTFgZ_y%On5*4jM^B
zK~#90?VZ1G<K`L1zx*MQl6|HwDIgCASOp54hXAJ`Ks^LF1;}vQxj=#3R&{E(-hZIe
z*v;8GYD|C>@okr>^5y^?Bp`ziNKhGQ0Sir1@qCg<iWEDLlu3#bN%5!T_X8Mb>m>3O
zpYQv;&-*^lOH$Y|sx6@cpbns6zGVGd18@}ZFxLPE=I>qGzrA5w97StkzM!&hKvb$N
zp#j6l4H$+O5<aB}pa(+`-C<koCVaj`**XDKTS5)MDGY-@&$KajyoMo&^I=;YWZRT*
zY=r=9MsEUml4)c7=>zCsOT>_C0aROpW%RuC^su}J&>6PH^Q;@Pirfjn4C0yqULttV
zmUpfJoWT%7u7b$i2*5P_OY<k`KrSmp7(zJ9ix6@lfND#4h21v18xe*GUS-{oOa)+$
z@n_f_S09#Z057wQ5i${g8P#_HJk8?#IphLBGmBXRllBQsci#c<IPG)im>PgT?l*XT
zd?9z!JaK9sfb{ynr0NY)5r8??cW{4#yr_sUM38uFKqq~IYD+i+@C}IZ!yo|o#=Lfk
zl9&fD=k@0xE<Y+408W!yH%P<-R9iwFMskE0KRQnVbj@oTJF$BJoAHUuj~5X@W7rmZ
zaUL{Q0TAOSPV6FxZ3r+6GrAzgPZ9yfaL|bBfU$T0((_X%Hct>)0L1v25sL^S34j<s
zb0UjiV*!}+{4VleqP6SvVTfR(b%H2C;5mr#^S~1rw%CY`vVrCj<>#B8ln^_${RaPV
zd?CLH`@zsdfSK6&ChX@3sqnk738YX0FjKlckf1NGhydzgQpsUsfDVZ9^Naw)Mu7<&
z1DKUOe+bteLI%|K8$1=XvMA6HKwSUU5qKyFIs|k;jK56;9twN~U`G8UufKgfHEp++
zARZv`vLr%c_}Xr55NHN|+qyB6095<}!j(awxz;}b8T+>#5kPHKu3+5|aG&<-?J@!k
zTYBQ@0Z8xPIaYdsRUV)TV*Fh~fML@mRtaFG%OGqmo;F<)fH`-(uiLeEnIo@t0WS~G
zOuj9IjA*)Fa0G$on*YC2Y78M8er?YYxIKXH(jj5%aoE@`fM$B_AY??-{>NenAnyNO
zu^0yI9)P(2`@_Q4b^$cfZwDbG8rCm%0g$ZU{b6Bi3Rvvy{YO@<*%s6r4Rc9f{LNHo
zFqLQ<taVAp>_&6ER;;m+jv0_ohi$QIov9JmQI&xTWuW@LkLD?`hfFLN5dh??nd3qh
z4jFLAg~-QM1}dc94ARvMx~zM?hpjRw95N`>7?kQo-(%{Mj%iQ9v^Rq~)I8rqag^hj
zaa<!84FJgqV0<Bm`V1q`;OhnKop7M|&9*DvzLB7bbH_2G3gGsQgvodQ-$fm2P=^|(
zefSDMz0olGa^h&K7rLxNxmKZE8=Yyt!3S@6FdD#J43NnEXM&=MbBr%!{L&diz47i5
z>yWQzOBYlV=a8>v8@K7*`P9?+#UmEQBNl8m{H{9nM#C?i@lsnEfnFS!;!?YHV;ulk
zGxwiZ>bH2rqEK^QEcIp%^+sE|5b98acs|94f8Gyuj%m-^(9_;*BQG$ylrilqj@R~{
za!Vdcmvkrt74nt3c8IXvJNk0scn@1;@ZcH0H0G-}8kB*$c8G`pq1qBEEE4Yhg&MQc
zeJKMKw{IlJmsE!uradLlSPB5zXb$<Uw*cg~Gw6~YdRTeib@u#&=OxefP&@_hxB%|B
zfCH4)dYoxbaR{ERGWejm=h-&)kO6zhpnSqX8_l6htA!PjI*knH|HT?>Tm+Zfldt@P
zNQ-GtiS++&l!5B#rNtvQuo%~Q8~1m5@Qe>6Or}DEJxuJD&W*(H6zT`XQ%e^($SlG_
zvbldopiz3_Jl5ngya4RDhp$bsf;o$nrh2|)>H#dcW9P+KH<sFQ2Y-CM0KV?*g_<}I
zB`7z#wDCuMj+>ZU4@34IAPVl_uT(FhSYyEm&aWk{2ok-ZdG~O%`Aou&dzh1AI&M^G
z8275*I^4k@_qecFEGeHjhXLto7P!Z`U9%?6@$P&Yv9-&`y?rBXH06z%8jT#(|G8as
z@yLICbO(1Oo9lN6W4f#d?s4oPv*baheZ`o<MR40*!`v^OacmxDLymGW1h`$a`(pWh
z#=YvtRA_LIogxSm3?7`8mR^(J&hYc!-fwKMQoXn&Y+cqd`f7rA=hMt$g3JZ*zAG&)
z2>C7Ecm;oMO0L(`p$2WVe)-j+SYvVUd|3pVILGL#3I5j^2R@da%8Rn+3gWb{;J;_L
zm|TWiLXU$?1@OKrE#(c$zvX-rAMQD|*F2p&E-bn7FkYZkFQW2!*>h=DxmNMh7q_^5
zBZca@6i?xU=H8Nb0t|0(`>lkZ&Tb>kTEfEYH~3d^9#9#mm|fomH^mz32!M>G(;39C
zr;y(|zbIQ}P<c^adwgBeA^v@`_?vrNK>1_ug_^mfJKCcDG{@d2T;T7*{)z$rQ32}B
z+%tJI`;P|c``IF^83c-@z<*Q#%~P2DTLWBipf2l>`ZMSfP<+IIVw24cBrbs2wTAJ9
zy!es&Gblf*OLKkhaRCoslzqSO^q&fpAMb>-_X&r>ij^{^LSyost=DVDYpdSx1#K==
zF%=rhV70-3aEm*IM=bb{3eZM6w4c4jCI6tJ_=o|$pPZvkTmZfe5NJGj#^b?fd?2-p
zUr!g}p*RYa->>!<G*4kRa3`IN9vGIwA!B$N7M|a4cCBGP(nBSmXx?Z`vBpBZnPWb7
zc8d8}hxGjn+;7;#M3A}w7{Ta)e7%5!XC>@^#s}_^%0PAW=<>%LxZn8qI{Q$g{X9ph
zUR+x62?E7ZDAtVJfY-2~4mHp`g~Fq7%e+j5M)~8S_pqP=$`2|^^<pB!LE;P2dr!I8
ziW%I~MP1VIz8ik6cG^=SwTY?Fc-Y*-<Wk1%x6bpw@5+X;HV|0(gadb6!05|~BSWf*
zbBr(LB#J_k7eHL-lD?FqcmEv}sW*$|VwTPNfOoI&Rtk05DEBI#1P?atFclgfH1~|+
z7@G(tm(fJK3L3@(jB`)ewC*~hCW!2m>cyoDq%w%M#7pti(rieV^(2;#uUQy(0?B+i
z*bn<0p5myb^?pC3o^$a?>dj(H$#Tc6!yCo1s>f7luvNz41?KUu77n&z2v7#9bLH>2
z5ZWCw724sdr+p=GQHCFJ9K(xE0@cvxfbrCiT;mS@!uEc^5RH3PFRo$5-Q(jb;db}<
z1WLoZndbuh&?RRkkF7Erl}J%M1>QABUsX&R7WdM0992ZxXzp<Tj1bTM2{*a-0Pbqr
zO?v;T&#FUhDX@BXKE>ox4m^%edx~THr?_RIDFYSn&ZmI`Ppg91j#t7f2D&VayMX5w
zckt)FxM8qz{q}fba;Z4dzuIVyX<xzZw-UI=1#rhkF2mjXbV<kfQeH}C38y8`m|)sB
zgkq(xt>e1!s+4A{t1GJ`(qo5haa3&yB64_JIQ2$zTnPTS5INu~pA;R7H`3J%2Ut%1
z0!9shRdr--)dGyM*{fdv;Cab+DOeNdn0zNMHl46lW)bYoZnUKwiB&$H0OGJMjx1T{
z(hIoLw^7``g*$a@E!_BF->T&{KE+X}d|nP*K5j=HYK!A~CCFCo9f*M*aJLfJMNGGZ
zce}MHb8YsJ#$Lr(QL{FaMup-j96T>M3Oel5t;&nCxxv+l58UP4c8W)=QHkv1nTj<Q
zAO30IaokmV0~vuvvBsi&QcQ9`0AR*`WP5l3+*`Qg5~F*&dEt;rY)!#~Pls)>YrjWO
zE(+BN=`d`I6yPigd!12R2<fx1wOs(+^xHwmh_3aET>u+Df0nRyENs0HfO+4zeip4E
zq)LC?tztW=HieJ{9s3_{0gz!}_i@<RApp}gklDcQ^4k40QLp@BCzYlUvY_LBVbw#U
z2H1i!F+wP=hi$RuesNWW0eM>J?%`?ERRZY1c+?nSHxRL6X!jI=`FuIz1$KwCO`aTj
z2I2*F0TF9D^GX2_FR(ML?ES!+heunG8NpWL8Ts1@QfEw_BD%f!+AdJ}Nwp<(5mU(+
zAvG?BZL#6^rl30wnjit;HX$P5BLD*xwv8|3(SC#Hk%QaH5(4qpVOtE8*b7yGNQQ!~
zAdu^~2)o&=2{IJqnZT~!B9s8kRAQ(T5K^V-PWSo|y10FOAz$q`_=f;a!hV*JC|?ZQ
zV(5jtjdvlCcpz7V8u#r)*>HXeQbd{u`iSt{=ScgIsx6@oqsBaUJB#lLB7nxQEpEKI
zH}Xa_B7)3_Y<wUF0RTh<84!!{ftYR=Z#Lu<WQ`yVL;$C87$1nq16UAGkT|jRe2dsO
zqZ1J%M(oB15_n>W*}w+K6fsWvNWl0&0v^D^d?@uf$YN1cE?|uLE6ci~kof&bsx9FR
zz+aL+&yMoNuq`H9k(J5~X{s&Z6h>V-i3@@u!bt2SzF9Z5I}%k}LJfup$dIs}3v7_p
z+mzG<U{P%euV54_5^vx{gi*r%D$SFoE&zad0}oQ|^>#85fQ1<woZ<fNJGch$GL5l*
z6`2aa;vNnQnYeo|av=a<v2O4ZyDbE3pWfQ-T4|CS0a%zqXu=S}t_%&=Fbv<xi{UMD
zCjdKUjL-z|JmaQp%4--#&+W~(axDN0bJk#q;Yp^A@uv@ChI5`pR3DbD5P%(<7#hfr
zXLt=G1G*JPx3hHuaAV%;-ukH{`2bRc@vwz1fbOs@b`w5dqHMhY+?YXR9e4W}t$%9>
r9#me#c%UY5cVp!)fL`8$xTyRe`)Jg&1RiM`00000NkvXXu0mjfhlveJ

literal 0
HcmV?d00001

diff --git a/tct-sp02-wrt-tests/enforce-csp-to-resource/index.html b/tct-sp02-wrt-tests/enforce-csp-to-resource/index.html
new file mode 100644
index 0000000..b6f02a5
--- /dev/null
+++ b/tct-sp02-wrt-tests/enforce-csp-to-resource/index.html
@@ -0,0 +1,79 @@
+<!DOCTYPE html>
+<!--
+Copyright (c) 2012 Intel Corporation.
+
+Redistribution and use in source and binary forms, with or without modification,
+are permitted provided that the following conditions are met:
+
+* Redistributions of works must retain the original copyright notice, this list
+  of conditions and the following disclaimer.
+* Redistributions in binary form must reproduce the original copyright notice,
+  this list of conditions and the following disclaimer in the documentation
+  and/or other materials provided with the distribution.
+* Neither the name of Intel Corporation nor the names of its contributors
+  may be used to endorse or promote products derived from this work without
+  specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY INTEL CORPORATION "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL INTEL CORPORATION BE LIABLE FOR ANY DIRECT,
+INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
+BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY
+OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
+NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
+EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+Authors:
+        yunfeix.hao <yunfeix.hao@intel.com>
+
+-->
+
+<html>
+  <head>
+    <title>WRT Test: enforce-csp-to-resource</title>
+    <link rel="author" title="Intel" href="http://www.intel.com" />
+    <link rel="help" href="http://www.w3.org/TR/CSP" />
+    <meta name="flags" content="" />
+    <meta name="assert" content="Check WRT MUST enforce CSP policy to a main resource if the WRT is in CSP-based security mode." />
+    <meta charset="utf-8">
+    <style>body{ background:red }</style>
+  </head>
+  <body onload="test()" id="body">
+    <h1 id="verdict">FAIL</h1> 
+    <p id="reason">Test did not run.</p>
+    <script src="support/csp.js"></script>
+    <script language="javascript" type="text/javascript">
+      var id = "enforce-csp-to-resource";
+      var reason  = document.getElementById("reason");
+      var body    = document.getElementById("body");
+      var verdict = document.getElementById("verdict");
+
+      /* Called if the test passed */
+      function pass(excuse) {
+        body.style.backgroundColor = "green";
+        verdict.innerHTML = "PASS";
+        reason.innerHTML  = excuse;
+      }
+
+      /* Called if the test failed */
+      function fail(excuse) {
+        reason.innerHTML = excuse;
+      }
+
+      /*Called to perform the test */
+      function test() {
+        try {
+          var xhr = new XMLHttpRequest();
+          xhr.open("GET", "support/csp.js");
+          why = "Test "+ id +" passed because WRT MUST enforce CSP policy to a main resource if the WRT is in CSP-based security mode.";
+          pass(why);
+        } catch(e) {
+          why = "Test "+ id +" failed by throwing the following exception: " + e;
+          fail(why);
+        }
+      } 
+    </script>
+  </body>
+</html>
diff --git a/tct-sp02-wrt-tests/enforce-csp-to-resource/support/csp.js b/tct-sp02-wrt-tests/enforce-csp-to-resource/support/csp.js
new file mode 100644
index 0000000..de46ff6
--- /dev/null
+++ b/tct-sp02-wrt-tests/enforce-csp-to-resource/support/csp.js
@@ -0,0 +1,33 @@
+/*
+Copyright (c) 2013 Intel Corporation.
+
+Redistribution and use in source and binary forms, with or without modification,
+are permitted provided that the following conditions are met:
+
+* Redistributions of works must retain the original copyright notice, this list
+  of conditions and the following disclaimer.
+* Redistributions in binary form must reproduce the original copyright notice,
+  this list of conditions and the following disclaimer in the documentation
+  and/or other materials provided with the distribution.
+* Neither the name of Intel Corporation nor the names of its contributors
+  may be used to endorse or promote products derived from this work without
+  specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY INTEL CORPORATION "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL INTEL CORPORATION BE LIABLE FOR ANY DIRECT,
+INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
+BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY
+OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
+NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
+EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+Authors:
+        Zhang, Zhiqiang <zhiqiang.zhang@intel.com>
+
+*/
+
+var X = 10;
+var Y = eval(X + 17);
\ No newline at end of file
diff --git a/tct-sp02-wrt-tests/tests.xml b/tct-sp02-wrt-tests/tests.xml
index 9c3ee10..342736d 100644
--- a/tct-sp02-wrt-tests/tests.xml
+++ b/tct-sp02-wrt-tests/tests.xml
@@ -119,6 +119,106 @@
         </spec>
       </specs>
     </testcase>
+    <testcase purpose="Check that WRT MUST enforce CSP policy to a main resource if the WRT is in CSP-based security mode." type="user_experience" status="approved" component="Web/Runtime/SecurityPrivacy" execution_type="manual" priority="P1" id="enforce-csp-to-resource">
+      <description>
+        <pre_condition>Make sure enforce-csp-to-resource.wgt is installed with the command : wrt-installer -i /opt/tct-csp-wrt-tests/enforce-csp-to-resource.wgt</pre_condition>
+        <post_condition>Get the 'application id' of enforce-csp-to-resource.wgt with the command : wrt-launcher -l, then uninstall the enforce-csp-to-resource.wgt with the command : wrt-installer -un 'application id'</post_condition>
+        <steps>
+          <step order="1">
+            <step_desc>Install enforce-csp-to-resource.wgt application with the command : wrt-installer -i /opt/tct-csp-wrt-tests/enforce-csp-to-resource.wgt</step_desc>
+            <expected>Widget application is able to be installed successfully</expected>
+          </step>
+          <step order="2">
+            <step_desc>Get the 'application id' of enforce-csp-to-resource.wgt with the command :"wrt-launcher -l" and launch the enforce-csp-to-resource.wgt with the command :"wrt-launcher -s 'application id'".</step_desc>
+            <expected>The screen shows "PASS" on green background.</expected>
+          </step>
+        </steps>
+        <test_script_entry timeout="90">/opt/tct-csp-wrt-tests/enforce-csp-to-resource.wgt</test_script_entry>
+        <notes></notes>
+      </description>
+      <specs>
+        <spec>
+          <spec_assertion element_type="attribute" element_name="N/A" interface="0740" specification="Content Security Policy" section="Web Application Security and Privacy" category="Tizen WRT Core Specifications"></spec_assertion>
+          <spec_url></spec_url>
+          <spec_statement></spec_statement>
+        </spec>
+      </specs>
+    </testcase>
+    <testcase purpose="Check that WRT MUST enforce CSP policy in content-security-policy tag in config.xml." type="user_experience" status="approved" component="Web/Runtime/SecurityPrivacy" execution_type="manual" priority="P1" id="config-xml-with-csp">
+      <description>
+        <pre_condition>Make sure config-xml-with-csp.wgt is installed with the command : wrt-installer -i /opt/tct-csp-wrt-tests/config-xml-with-csp.wgt</pre_condition>
+        <post_condition>Get the 'application id' of config-xml-with-csp.wgt with the command : wrt-launcher -l, then uninstall the config-xml-with-csp.wgt with the command : wrt-installer -un 'application id'</post_condition>
+        <steps>
+          <step order="1">
+            <step_desc>Install config-xml-with-csp.wgt application with the command : wrt-installer -i /opt/tct-csp-wrt-tests/config-xml-with-csp.wgt</step_desc>
+            <expected>Widget application is able to be installed successfully</expected>
+          </step>
+          <step order="2">
+            <step_desc>Get the 'application id' of config-xml-with-csp.wgt with the command :"wrt-launcher -l" and launch the config-xml-with-csp.wgt with the command :"wrt-launcher -s 'application id'".</step_desc>
+            <expected>The screen shows "PASS" on green background.</expected>
+          </step>
+        </steps>
+        <test_script_entry timeout="90">/opt/tct-csp-wrt-tests/config-xml-with-csp.wgt</test_script_entry>
+        <notes></notes>
+      </description>
+      <specs>
+        <spec>
+          <spec_assertion element_type="attribute" element_name="N/A" interface="0741" specification="Content Security Policy" section="Web Application Security and Privacy" category="Tizen WRT Core Specifications"></spec_assertion>
+          <spec_url></spec_url>
+          <spec_statement></spec_statement>
+        </spec>
+      </specs>
+    </testcase>
+    <testcase purpose="Check that default CSP policy enforced by WRT is default-src *; script-src self; style-src self; object-src none with content-security-policy." type="user_experience" status="approved" component="Web/Runtime/SecurityPrivacy" execution_type="manual" priority="P1" id="default-policy-by-directives-csp">
+      <description>
+        <pre_condition>Make sure default-policy-by-directives-csp.wgt is installed with the command : wrt-installer -i /opt/tct-csp-wrt-tests/default-policy-by-directives-csp.wgt</pre_condition>
+        <post_condition>Get the 'application id' of default-policy-by-directives-csp.wgt with the command : wrt-launcher -l, then uninstall the default-policy-by-directives-csp.wgt with the command : wrt-installer -un 'application id'</post_condition>
+        <steps>
+          <step order="1">
+            <step_desc>Install default-policy-by-directives-csp.wgt application with the command : wrt-installer -i /opt/tct-csp-wrt-tests/default-policy-by-directives-csp.wgt</step_desc>
+            <expected>Widget application is able to be installed successfully</expected>
+          </step>
+          <step order="2">
+            <step_desc>Get the 'application id' of default-policy-by-directives-csp.wgt with the command :"wrt-launcher -l" and launch the default-policy-by-directives-csp.wgt with the command :"wrt-launcher -s 'application id'".</step_desc>
+            <expected>The screen shows "PASS" on green background.</expected>
+          </step>
+        </steps>
+        <test_script_entry timeout="90">/opt/tct-csp-wrt-tests/default-policy-by-directives-csp.wgt</test_script_entry>
+        <notes></notes>
+      </description>
+      <specs>
+        <spec>
+          <spec_assertion element_type="attribute" element_name="N/A" interface="0742" specification="Content Security Policy" section="Web Application Security and Privacy" category="Tizen WRT Core Specifications"></spec_assertion>
+          <spec_url></spec_url>
+          <spec_statement></spec_statement>
+        </spec>
+      </specs>
+    </testcase>
+    <testcase purpose="Check that default CSP policy enforced by WRT is default-src *; script-src self; style-src self; object-src none with content-security-policy-report-only." type="user_experience" status="approved" component="Web/Runtime/SecurityPrivacy" execution_type="manual" priority="P1" id="default-policy-by-directives-report-only">
+      <description>
+        <pre_condition>Make sure default-policy-by-directives-report-only.wgt is installed with the command : wrt-installer -i /opt/tct-csp-wrt-tests/default-policy-by-directives-report-only.wgt</pre_condition>
+        <post_condition>Get the 'application id' of default-policy-by-directives-report-only.wgt with the command : wrt-launcher -l, then uninstall the default-policy-by-directives-report-only.wgt with the command : wrt-installer -un 'application id'</post_condition>
+        <steps>
+          <step order="1">
+            <step_desc>Install default-policy-by-directives-report-only.wgt application with the command : wrt-installer -i /opt/tct-csp-wrt-tests/default-policy-by-directives-report-only.wgt</step_desc>
+            <expected>Widget application is able to be installed successfully</expected>
+          </step>
+          <step order="2">
+            <step_desc>Get the 'application id' of default-policy-by-directives-report-only.wgt with the command :"wrt-launcher -l" and launch the default-policy-by-directives-report-only.wgt with the command :"wrt-launcher -s 'application id'".</step_desc>
+            <expected>The screen shows "PASS" on green background.</expected>
+          </step>
+        </steps>
+        <test_script_entry timeout="90">/opt/tct-csp-wrt-tests/default-policy-by-directives-report-only.wgt</test_script_entry>
+        <notes></notes>
+      </description>
+      <specs>
+        <spec>
+          <spec_assertion element_type="attribute" element_name="N/A" interface="0742" specification="Content Security Policy" section="Web Application Security and Privacy" category="Tizen WRT Core Specifications"></spec_assertion>
+          <spec_url></spec_url>
+          <spec_statement></spec_statement>
+        </spec>
+      </specs>
+    </testcase>
    </set>
 </suite>
 </test_definition>
-- 
2.7.4