23 lines
549 B
HTML
23 lines
549 B
HTML
<!DOCTYPE html>
|
|
<meta charset="utf-8">
|
|
<title>X-Frame-Options headers use the get, decode, and split algorithm</title>
|
|
<script src="/resources/testharness.js"></script>
|
|
<script src="/resources/testharnessreport.js"></script>
|
|
<script src="support/helper.sub.js"></script>
|
|
|
|
<body>
|
|
<script>
|
|
"use strict";
|
|
|
|
xfo_simple_tests({
|
|
headerValue: `,SAMEORIGIN,,DENY,`,
|
|
sameOriginAllowed: false,
|
|
crossOriginAllowed: false
|
|
});
|
|
|
|
xfo_simple_tests({
|
|
headerValue: ` SAMEORIGIN, DENY`,
|
|
sameOriginAllowed: false,
|
|
crossOriginAllowed: false
|
|
});
|
|
</script>
|