local-image-from-remote-whitelisted.html

<!DOCTYPE html>
<html>
<body>

<script>

testRunner.dumpAsText();
testRunner.addOriginAccessAllowListEntry('http://127.0.0.1:8000', 'file', '', true);

var localImageLocation = testRunner.pathToLocalResource('file:///tmp/web_tests/http/tests/security/resources/compass.jpg');

var localImageElement = document.createElement('img');
localImageElement.style.display = "block";
localImageElement.src = localImageLocation;
document.body.appendChild(localImageElement);

window.onload = function() {
    var result = document.getElementById('result');
    if (localImageElement.height == 0 && localImageElement.width == 0)
        result.textContent = 'Test Failed: Local image not loaded remotely.';
    else
        result.textContent = 'Test Passed. Local image loaded remotely.';
};

</script>

<p>This test is to see if a remote file can include a local image when the
access has been white listed using addOriginAccessAllowListEntry.

<p id=result>Test has not run.

</body>
</html>

chromium/third_party/blink/web_tests/http/tests/security/local-image-from-remote-whitelisted.html