mirror of
https://github.com/servo/servo.git
synced 2025-08-29 00:58:20 +01:00
Update web-platform-tests to revision ef44bff0adaa07f2e420a0cbc1bc493cd5786656
This commit is contained in:
WPT Sync Bot
parent
61cadfa9a6
commit
67592a2228
61 changed files with 981 additions and 481 deletions
202
tests/wpt/web-platform-tests/fetch/origin/assorted.window.js
Normal file
202
tests/wpt/web-platform-tests/fetch/origin/assorted.window.js
Normal file
|
|
@ -0,0 +1,202 @@
|
|||
// META: script=/common/utils.js
|
||||
// META: script=/common/get-host-info.sub.js
|
||||
|
||||
const origins = get_host_info();
|
||||
|
||||
promise_test(async function () {
|
||||
const stash = token(),
|
||||
redirectPath = "/fetch/origin/resources/redirect-and-stash.py";
|
||||
|
||||
// Cross-origin -> same-origin will result in setting the tainted origin flag for the second
|
||||
// request.
|
||||
let url = origins.HTTP_ORIGIN + redirectPath + "?stash=" + stash;
|
||||
url = origins.HTTP_REMOTE_ORIGIN + redirectPath + "?stash=" + stash + "&location=" + encodeURIComponent(url);
|
||||
|
||||
await fetch(url, { mode: "no-cors", method: "POST" });
|
||||
|
||||
const json = await (await fetch(redirectPath + "?dump&stash=" + stash)).json();
|
||||
|
||||
assert_equals(json[0], origins.HTTP_ORIGIN);
|
||||
assert_equals(json[1], "null");
|
||||
}, "Origin header and 308 redirect");
|
||||
|
||||
promise_test(async function () {
|
||||
const stash = token(),
|
||||
redirectPath = "/fetch/origin/resources/redirect-and-stash.py";
|
||||
|
||||
let url = origins.HTTP_ORIGIN + redirectPath + "?stash=" + stash;
|
||||
url = origins.HTTP_REMOTE_ORIGIN + redirectPath + "?stash=" + stash + "&location=" + encodeURIComponent(url);
|
||||
|
||||
await new Promise(resolve => {
|
||||
const frame = document.createElement("iframe");
|
||||
frame.src = url;
|
||||
frame.onload = () => {
|
||||
resolve();
|
||||
frame.remove();
|
||||
}
|
||||
document.body.appendChild(frame);
|
||||
});
|
||||
|
||||
const json = await (await fetch(redirectPath + "?dump&stash=" + stash)).json();
|
||||
|
||||
assert_equals(json[0], "no Origin header");
|
||||
assert_equals(json[1], "no Origin header");
|
||||
}, "Origin header and GET navigation");
|
||||
|
||||
promise_test(async function () {
|
||||
const stash = token(),
|
||||
redirectPath = "/fetch/origin/resources/redirect-and-stash.py";
|
||||
|
||||
let url = origins.HTTP_ORIGIN + redirectPath + "?stash=" + stash;
|
||||
url = origins.HTTP_REMOTE_ORIGIN + redirectPath + "?stash=" + stash + "&location=" + encodeURIComponent(url);
|
||||
|
||||
await new Promise(resolve => {
|
||||
const frame = document.createElement("iframe");
|
||||
self.addEventListener("message", e => {
|
||||
if (e.data === "loaded") {
|
||||
resolve();
|
||||
frame.remove();
|
||||
}
|
||||
}, { once: true });
|
||||
frame.onload = () => {
|
||||
const doc = frame.contentDocument,
|
||||
form = doc.body.appendChild(doc.createElement("form")),
|
||||
submit = form.appendChild(doc.createElement("input"));
|
||||
form.action = url;
|
||||
form.method = "POST";
|
||||
submit.type = "submit";
|
||||
submit.click();
|
||||
}
|
||||
document.body.appendChild(frame);
|
||||
});
|
||||
|
||||
const json = await (await fetch(redirectPath + "?dump&stash=" + stash)).json();
|
||||
|
||||
assert_equals(json[0], origins.HTTP_ORIGIN);
|
||||
assert_equals(json[1], "null");
|
||||
}, "Origin header and POST navigation");
|
||||
|
||||
function navigationReferrerPolicy(referrerPolicy, destination, expectedOrigin) {
|
||||
return async function () {
|
||||
const stash = token();
|
||||
const referrerPolicyPath = "/fetch/origin/resources/referrer-policy.py";
|
||||
const redirectPath = "/fetch/origin/resources/redirect-and-stash.py";
|
||||
|
||||
let postUrl =
|
||||
(destination === "same-origin" ? origins.HTTP_ORIGIN
|
||||
: origins.HTTP_REMOTE_ORIGIN) +
|
||||
redirectPath + "?stash=" + stash;
|
||||
|
||||
await new Promise(resolve => {
|
||||
const frame = document.createElement("iframe");
|
||||
document.body.appendChild(frame);
|
||||
frame.src = origins.HTTP_ORIGIN + referrerPolicyPath +
|
||||
"?referrerPolicy=" + referrerPolicy;
|
||||
self.addEventListener("message", function listener(e) {
|
||||
if (e.data === "loaded") {
|
||||
resolve();
|
||||
frame.remove();
|
||||
self.removeEventListener("message", listener);
|
||||
} else if (e.data === "action") {
|
||||
const doc = frame.contentDocument,
|
||||
form = doc.body.appendChild(doc.createElement("form")),
|
||||
submit = form.appendChild(doc.createElement("input"));
|
||||
form.action = postUrl;
|
||||
form.method = "POST";
|
||||
submit.type = "submit";
|
||||
submit.click();
|
||||
}
|
||||
});
|
||||
});
|
||||
|
||||
const json = await (await fetch(redirectPath + "?dump&stash=" + stash)).json();
|
||||
|
||||
assert_equals(json[0], expectedOrigin);
|
||||
};
|
||||
}
|
||||
|
||||
function fetchReferrerPolicy(referrerPolicy, destination, fetchMode, expectedOrigin) {
|
||||
return async function () {
|
||||
const stash = token();
|
||||
const referrerPolicyPath = "/fetch/origin/resources/referrer-policy.py";
|
||||
const redirectPath = "/fetch/origin/resources/redirect-and-stash.py";
|
||||
|
||||
let fetchUrl =
|
||||
(destination === "same-origin" ? origins.HTTP_ORIGIN
|
||||
: origins.HTTP_REMOTE_ORIGIN) +
|
||||
redirectPath + "?stash=" + stash;
|
||||
|
||||
await fetch(fetchUrl, { mode: fetchMode, method: "POST" , "referrerPolicy": referrerPolicy});
|
||||
|
||||
const json = await (await fetch(redirectPath + "?dump&stash=" + stash)).json();
|
||||
|
||||
assert_equals(json[0], expectedOrigin);
|
||||
};
|
||||
}
|
||||
|
||||
function referrerPolicyTestString(referrerPolicy, destination) {
|
||||
return "Origin header and POST " + destination + " with Referrer-Policy " +
|
||||
referrerPolicy;
|
||||
}
|
||||
|
||||
[
|
||||
{
|
||||
"policy": "no-referrer",
|
||||
"expectedOriginForSameOrigin": "null",
|
||||
"expectedOriginForCrossOrigin": "null"
|
||||
},
|
||||
{
|
||||
"policy": "same-origin",
|
||||
"expectedOriginForSameOrigin": origins.HTTP_ORIGIN,
|
||||
"expectedOriginForCrossOrigin": "null"
|
||||
},
|
||||
{
|
||||
"policy": "origin-when-cross-origin",
|
||||
"expectedOriginForSameOrigin": origins.HTTP_ORIGIN,
|
||||
"expectedOriginForCrossOrigin": origins.HTTP_ORIGIN
|
||||
},
|
||||
{
|
||||
"policy": "no-referrer-when-downgrade",
|
||||
"expectedOriginForSameOrigin": origins.HTTP_ORIGIN,
|
||||
"expectedOriginForCrossOrigin": origins.HTTP_ORIGIN
|
||||
},
|
||||
{
|
||||
"policy": "unsafe-url",
|
||||
"expectedOriginForSameOrigin": origins.HTTP_ORIGIN,
|
||||
"expectedOriginForCrossOrigin": origins.HTTP_ORIGIN
|
||||
},
|
||||
].forEach(testObj => {
|
||||
[
|
||||
{
|
||||
"name": "same-origin",
|
||||
"expectedOrigin": testObj.expectedOriginForSameOrigin
|
||||
},
|
||||
{
|
||||
"name": "cross-origin",
|
||||
"expectedOrigin": testObj.expectedOriginForCrossOrigin
|
||||
}
|
||||
].forEach(destination => {
|
||||
// Test form POST navigation
|
||||
promise_test(navigationReferrerPolicy(testObj.policy,
|
||||
destination.name,
|
||||
destination.expectedOrigin),
|
||||
referrerPolicyTestString(testObj.policy,
|
||||
destination.name + " navigation"));
|
||||
// Test fetch
|
||||
promise_test(fetchReferrerPolicy(testObj.policy,
|
||||
destination.name,
|
||||
"no-cors",
|
||||
destination.expectedOrigin),
|
||||
referrerPolicyTestString(testObj.policy,
|
||||
destination.name + " fetch no-cors mode"));
|
||||
|
||||
// When we're dealing with CORS (mode is "cors"), we shouldn't take the
|
||||
// Referrer-Policy into account
|
||||
promise_test(fetchReferrerPolicy(testObj.policy,
|
||||
destination.name,
|
||||
"cors",
|
||||
origins.HTTP_ORIGIN),
|
||||
referrerPolicyTestString(testObj.policy,
|
||||
destination.name + " fetch cors mode"));
|
||||
});
|
||||
});
|
||||
|
|
@ -1,20 +0,0 @@
|
|||
// META: script=/common/utils.js
|
||||
// META: script=/common/get-host-info.sub.js
|
||||
|
||||
promise_test(async function() {
|
||||
const stash = token(),
|
||||
origins = get_host_info(),
|
||||
redirectPath = "/fetch/origin/resources/redirect-and-stash.py";
|
||||
|
||||
// Cross-origin -> same-origin will result in setting the tainted origin flag for the second
|
||||
// request.
|
||||
let url = origins.HTTP_ORIGIN + redirectPath + "?stash=" + stash;
|
||||
url = origins.HTTP_REMOTE_ORIGIN + redirectPath + "?stash=" + stash + "&location=" + encodeURIComponent(url);
|
||||
|
||||
await fetch(url, { mode: "no-cors", method: "POST" });
|
||||
|
||||
const json = await (await fetch(redirectPath + "?dump&stash=" + stash)).json();
|
||||
|
||||
assert_equals(json[0], origins.HTTP_ORIGIN, "first origin should equal this origin");
|
||||
assert_equals(json[1], "null", "second origin should be opaque and therefore null");
|
||||
}, "Origin header and 308 redirect");
|
||||
|
|
@ -9,7 +9,7 @@ def main(request, response):
|
|||
origin_list = request.server.stash.take(key)
|
||||
|
||||
if "dump" in request.GET:
|
||||
response.headers.set("content-Type", "application/json")
|
||||
response.headers.set("Content-Type", "application/json")
|
||||
response.content = json.dumps(origin_list)
|
||||
return
|
||||
|
||||
|
|
@ -25,5 +25,6 @@ def main(request, response):
|
|||
response.headers.set("Location", request.GET.first("location"))
|
||||
return
|
||||
|
||||
response.headers.set("content-Type", "text/plain")
|
||||
response.content = "Fix https://github.com/whatwg/fetch/issues/737..."
|
||||
response.headers.set("Content-Type", "text/html")
|
||||
response.headers.set("Access-Control-Allow-Origin", "*")
|
||||
response.content = "<meta charset=utf-8>\n<body><script>parent.postMessage('loaded','*')</script></body>"
|
||||
|
|
|
|||
|
|
@ -0,0 +1,7 @@
|
|||
def main(request, response):
|
||||
if "referrerPolicy" in request.GET:
|
||||
response.headers.set("Referrer-Policy",
|
||||
request.GET.first("referrerPolicy"))
|
||||
response.status = 200
|
||||
response.headers.set("Content-Type", "text/html")
|
||||
response.content = "<meta charset=utf-8>\n<body><script>parent.postMessage('action','*')</script></body>"
|
||||
Loading…
Add table
Add a link
Reference in a new issue