mirror of
https://github.com/servo/servo.git
synced 2025-07-24 15:50:21 +01:00
Limit referer header value length to 4096
This commit is contained in:
parent
4cdfe23cc8
commit
c54df2b965
170 changed files with 49 additions and 674 deletions
|
@ -195,13 +195,15 @@ fn strict_origin_when_cross_origin(referrer_url: ServoUrl, url: ServoUrl) -> Opt
|
||||||
|
|
||||||
/// <https://w3c.github.io/webappsec-referrer-policy/#strip-url>
|
/// <https://w3c.github.io/webappsec-referrer-policy/#strip-url>
|
||||||
fn strip_url(mut referrer_url: ServoUrl, origin_only: bool) -> Option<ServoUrl> {
|
fn strip_url(mut referrer_url: ServoUrl, origin_only: bool) -> Option<ServoUrl> {
|
||||||
|
const MAX_REFERRER_URL_LENGTH: usize = 4096;
|
||||||
if referrer_url.scheme() == "https" || referrer_url.scheme() == "http" {
|
if referrer_url.scheme() == "https" || referrer_url.scheme() == "http" {
|
||||||
{
|
{
|
||||||
let referrer = referrer_url.as_mut_url();
|
let referrer = referrer_url.as_mut_url();
|
||||||
referrer.set_username("").unwrap();
|
referrer.set_username("").unwrap();
|
||||||
referrer.set_password(None).unwrap();
|
referrer.set_password(None).unwrap();
|
||||||
referrer.set_fragment(None);
|
referrer.set_fragment(None);
|
||||||
if origin_only {
|
// Limit `referer` header's value to 4k <https://github.com/w3c/webappsec-referrer-policy/pull/122>
|
||||||
|
if origin_only || referrer.as_str().len() > MAX_REFERRER_URL_LENGTH {
|
||||||
referrer.set_path("");
|
referrer.set_path("");
|
||||||
referrer.set_query(None);
|
referrer.set_query(None);
|
||||||
}
|
}
|
||||||
|
|
|
@ -27,11 +27,12 @@ use hyper::{Request as HyperRequest, Response as HyperResponse};
|
||||||
use msg::constellation_msg::TEST_PIPELINE_ID;
|
use msg::constellation_msg::TEST_PIPELINE_ID;
|
||||||
use net::cookie::Cookie;
|
use net::cookie::Cookie;
|
||||||
use net::cookie_storage::CookieStorage;
|
use net::cookie_storage::CookieStorage;
|
||||||
|
use net::http_loader::determine_request_referrer;
|
||||||
use net::resource_thread::AuthCacheEntry;
|
use net::resource_thread::AuthCacheEntry;
|
||||||
use net::test::replace_host_table;
|
use net::test::replace_host_table;
|
||||||
use net_traits::request::{CredentialsMode, Destination, RequestBuilder, RequestMode};
|
use net_traits::request::{CredentialsMode, Destination, RequestBuilder, RequestMode};
|
||||||
use net_traits::response::ResponseBody;
|
use net_traits::response::ResponseBody;
|
||||||
use net_traits::{CookieSource, NetworkError};
|
use net_traits::{CookieSource, NetworkError, ReferrerPolicy};
|
||||||
use servo_url::{ImmutableOrigin, ServoUrl};
|
use servo_url::{ImmutableOrigin, ServoUrl};
|
||||||
use std::collections::HashMap;
|
use std::collections::HashMap;
|
||||||
use std::io::Write;
|
use std::io::Write;
|
||||||
|
@ -1421,3 +1422,47 @@ fn test_origin_set() {
|
||||||
|
|
||||||
let _ = server.close();
|
let _ = server.close();
|
||||||
}
|
}
|
||||||
|
|
||||||
|
#[test]
|
||||||
|
fn test_determine_request_referrer_shorter_than_4k() {
|
||||||
|
let mut headers = HeaderMap::new();
|
||||||
|
|
||||||
|
let referrer_source =
|
||||||
|
ServoUrl::parse("http://username:password@example.com/such/short/referer?query#fragment")
|
||||||
|
.unwrap();
|
||||||
|
|
||||||
|
let current_url = ServoUrl::parse("http://example.com/current/url").unwrap();
|
||||||
|
|
||||||
|
let referer = determine_request_referrer(
|
||||||
|
&mut headers,
|
||||||
|
ReferrerPolicy::UnsafeUrl,
|
||||||
|
referrer_source,
|
||||||
|
current_url,
|
||||||
|
);
|
||||||
|
|
||||||
|
assert_eq!(
|
||||||
|
referer.unwrap().as_str(),
|
||||||
|
"http://example.com/such/short/referer?query"
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
#[test]
|
||||||
|
fn test_determine_request_referrer_longer_than_4k() {
|
||||||
|
let long_url_str = format!(
|
||||||
|
"http://username:password@example.com/such/{}/referer?query#fragment",
|
||||||
|
"long".repeat(1024)
|
||||||
|
);
|
||||||
|
|
||||||
|
let mut headers = HeaderMap::new();
|
||||||
|
let referrer_source = ServoUrl::parse(&long_url_str).unwrap();
|
||||||
|
let current_url = ServoUrl::parse("http://example.com/current/url").unwrap();
|
||||||
|
|
||||||
|
let referer = determine_request_referrer(
|
||||||
|
&mut headers,
|
||||||
|
ReferrerPolicy::UnsafeUrl,
|
||||||
|
referrer_source,
|
||||||
|
current_url,
|
||||||
|
);
|
||||||
|
|
||||||
|
assert_eq!(referer.unwrap().as_str(), "http://example.com/");
|
||||||
|
}
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-http.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-http.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-http.swap-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-https.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-https.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-https.swap-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.swap-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-https.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-https.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-https.swap-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-http.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-http.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-http.swap-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-https.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-https.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-https.swap-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.swap-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-https.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-https.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-https.swap-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-http.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-http.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-http.swap-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-https.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-https.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-https.swap-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.swap-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-https.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-https.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-https.swap-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-http.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-http.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-http.swap-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-https.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-https.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-https.swap-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.swap-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-https.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-https.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-https.swap-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-http.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-http.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-http.swap-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-https.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-https.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-https.swap-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.swap-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-https.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-https.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-https.swap-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-http.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-http.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-http.swap-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-https.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-https.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-https.swap-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.swap-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-https.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-https.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-https.swap-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-http.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-http.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-http.swap-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-https.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-https.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-https.swap-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-http.swap-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-https.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-https.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[same-https.swap-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-http.keep-origin.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
[cross-http.no-redirect.http.html]
|
|
||||||
[`Referer` header with length > 4k is stripped to an origin.]
|
|
||||||
expected: FAIL
|
|
||||||
|
|
Some files were not shown because too many files have changed in this diff Show more
Loading…
Add table
Add a link
Reference in a new issue