// META: script=/common/utils.js // Helpers that return headers objects with a particular guard function headersGuardNone(fill) { if (fill) return new Headers(fill); return new Headers(); } function headersGuardResponse(fill) { const opts = {}; if (fill) opts.headers = fill; return new Response('', opts).headers; } function headersGuardRequest(fill) { const opts = {}; if (fill) opts.headers = fill; return new Request('./', opts).headers; } function headersGuardRequestNoCors(fill) { const opts = { mode: 'no-cors' }; if (fill) opts.headers = fill; return new Request('./', opts).headers; } const headerGuardTypes = [ ['none', headersGuardNone], ['response', headersGuardResponse], ['request', headersGuardRequest] ]; for (const [guardType, createHeaders] of headerGuardTypes) { test(() => { // There are three ways to set headers. // Filling, appending, and setting. Test each: let headers = createHeaders({ Range: 'foo' }); assert_equals(headers.get('Range'), 'foo'); headers = createHeaders(); headers.append('Range', 'foo'); assert_equals(headers.get('Range'), 'foo'); headers = createHeaders(); headers.set('Range', 'foo'); assert_equals(headers.get('Range'), 'foo'); }, `Range header setting allowed for guard type: ${guardType}`); } test(() => { let headers = headersGuardRequestNoCors({ Range: 'foo' }); assert_false(headers.has('Range')); headers = headersGuardRequestNoCors(); headers.append('Range', 'foo'); assert_false(headers.has('Range')); headers = headersGuardRequestNoCors(); headers.set('Range', 'foo'); assert_false(headers.has('Range')); }, `Privileged header not allowed for guard type: request-no-cors`); promise_test(async () => { const wavURL = new URL('resources/long-wav.py', location); const stashTakeURL = new URL('resources/stash-take.py', location); function changeToken() { const stashToken = token(); wavURL.searchParams.set('accept-encoding-key', stashToken); stashTakeURL.searchParams.set('key', stashToken); } const rangeHeaders = [ 'bytes=0-10', 'foo=0-10', 'foo', '' ]; for (const rangeHeader of rangeHeaders) { changeToken(); await fetch(wavURL, { headers: { Range: rangeHeader } }); const response = await fetch(stashTakeURL); assert_equals(await response.json(), 'identity', `Expect identity accept-encoding if range header is ${JSON.stringify(rangeHeader)}`); } }, `Fetch with range header will be sent with Accept-Encoding: identity`);