33 lines
1.4 KiB
HTML
33 lines
1.4 KiB
HTML
<!DOCTYPE html>
|
|
<html>
|
|
<head>
|
|
<title>Allow lists starting with a comma should be parsed correctly</title>
|
|
<script src="/resources/testharness.js"></script>
|
|
<script src="/resources/testharnessreport.js"></script>
|
|
<script src="/common/get-host-info.sub.js"></script>
|
|
</head>
|
|
<body>
|
|
<script type="text/javascript">
|
|
async_test(function(test) {
|
|
const client = new XMLHttpRequest();
|
|
let url = "xhr/resources/access-control-allow-lists.py?headers=,y-lol,x-print,%20,,,y-print&origin=" +
|
|
get_host_info().HTTP_ORIGIN;
|
|
client.open("GET", get_host_info().HTTP_REMOTE_ORIGIN + '/' + url, false);
|
|
client.setRequestHeader('x-print', 'unicorn')
|
|
client.setRequestHeader('y-print', 'narwhal')
|
|
// Sending GET request with custom headers
|
|
assert_equals(client.send(null), undefined);
|
|
const response = JSON.parse(client.response);
|
|
assert_equals(response['x-print'], "unicorn");
|
|
assert_equals(response['y-print'], "narwhal");
|
|
|
|
url = "xhr/resources/access-control-allow-lists.py?methods=,,PUT,GET&origin=" +
|
|
get_host_info().HTTP_ORIGIN;
|
|
client.open("PUT", get_host_info().HTTP_REMOTE_ORIGIN + '/' + url, false);
|
|
// Sending PUT request
|
|
assert_equals(client.send(null), undefined);
|
|
test.done();
|
|
}, "Allow lists starting with a comma should be parsed correctly");
|
|
</script>
|
|
</body>
|
|
</html>
|