improve ff tests

Author: weizman

demo/index.html

@@ -23,6 +23,7 @@
                     }
                 }
             } else {
+                location.search.includes('disable_csp') ||
                 document.write(`<meta http-equiv="Content-Security-Policy" content="script-src 'self' blob:; object-src 'none';">`);
             }
         </script>

demo/util.js

@@ -11,7 +11,7 @@ function run(js) {
 }
 
 (function(){
-    location.search.includes('disable') || SNOW((win) => {
+    location.search.includes('disable_snow') || SNOW((win) => {
         win.alert = (msg) => {
             console.log('Snow: ', 'alert API is disabled, message is printed to console instead: ', msg);
         }

test/edge.js

@@ -51,6 +51,9 @@ describe('special cases', () => {
     });
 
     it('should fail to use atob of an embed that was cross origin and then same origin', async function () {
+        if (global.CONFIG.SKIP_CSP_OBJECT_SRC_CHECKS) {
+            this.skip();
+        }
         if (global.BROWSER === 'SAFARI') {
             this.skip(); // redirecting EMBED by updating src does not work in safari
         }
@@ -88,6 +91,9 @@ describe('special cases', () => {
     });
 
     it('should fail to use atob of an object that was cross origin and then same origin', async function () {
+        if (global.CONFIG.SKIP_CSP_OBJECT_SRC_CHECKS) {
+            this.skip();
+        }
         if (global.BROWSER === 'SAFARI') {
             this.skip(); // redirecting EMBED by updating src does not work in safari
         }
@@ -125,6 +131,9 @@ describe('special cases', () => {
     });
 
     it('should fail to use atob of an embed that was cross origin and then same origin (html)', async function () {
+        if (global.CONFIG.SKIP_CSP_OBJECT_SRC_CHECKS) {
+            this.skip();
+        }
         if (global.BROWSER === 'SAFARI') {
             this.skip(); // redirecting EMBED by updating src does not work in safari
         }
@@ -155,6 +164,9 @@ describe('special cases', () => {
     });
 
     it('should fail to use atob of an object that was cross origin and then same origin (html)', async function () {
+        if (global.CONFIG.SKIP_CSP_OBJECT_SRC_CHECKS) {
+            this.skip();
+        }
         if (global.BROWSER === 'SAFARI') {
             this.skip(); // redirecting EMBED by updating src does not work in safari
         }