mirror of
https://github.com/servo/servo.git
synced 2025-07-12 01:43:43 +01:00
49 lines
1.3 KiB
HTML
49 lines
1.3 KiB
HTML
<!DOCTYPE html>
|
|
<script src=/resources/testharness.js></script>
|
|
<script src=/resources/testharnessreport.js></script>
|
|
<script src=/fetch/sec-metadata/resources/helper.js></script>
|
|
|
|
<!-- Same-origin script -->
|
|
<script src="http://{{host}}:{{ports[http][0]}}/fetch/sec-metadata/resources/echo-as-script.py"></script>
|
|
<script>
|
|
test(t => {
|
|
t.add_cleanup(_ => { header = null; });
|
|
|
|
assert_header_equals(header, {
|
|
"dest": "",
|
|
"site": "",
|
|
"user": "",
|
|
"mode": "",
|
|
});
|
|
}, "Non-secure same-origin script => No headers");
|
|
</script>
|
|
|
|
<!-- Same-site script -->
|
|
<script src="http://{{hosts[][www]}}:{{ports[http][0]}}/fetch/sec-metadata/resources/echo-as-script.py"></script>
|
|
<script>
|
|
test(t => {
|
|
t.add_cleanup(_ => { header = null; });
|
|
|
|
assert_header_equals(header, {
|
|
"dest": "",
|
|
"site": "",
|
|
"user": "",
|
|
"mode": "",
|
|
});
|
|
}, "Non-secure same-site script => No headers");
|
|
</script>
|
|
|
|
<!-- Cross-site script -->
|
|
<script src="http://{{hosts[alt][www]}}:{{ports[http][0]}}/fetch/sec-metadata/resources/echo-as-script.py"></script>
|
|
<script>
|
|
test(t => {
|
|
t.add_cleanup(_ => { header = null; });
|
|
|
|
assert_header_equals(header, {
|
|
"dest": "",
|
|
"site": "",
|
|
"user": "",
|
|
"mode": "",
|
|
});
|
|
}, "Non-secure cross-site script => No headers");
|
|
</script>
|