13 lines
463 B
JavaScript
13 lines
463 B
JavaScript
// META: script=/common/get-host-info.sub.js
|
|
|
|
promise_test(t => {
|
|
const img = new Image();
|
|
img.src = get_host_info().HTTP_REMOTE_ORIGIN + "/fetch/cross-origin-resource-policy/resources/image.py?corp=same-site";
|
|
return new Promise((resolve, reject) => {
|
|
img.onload = resolve;
|
|
img.onerror = reject;
|
|
document.body.appendChild(img);
|
|
}).finally(() => {
|
|
img.remove();
|
|
});
|
|
}, "Cross-Origin-Resource-Policy does not block Mixed Content <img>");
|