blob: bb9f32c174f8883ad928858a1d2696db11d33136 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
|
<!DOCTYPE html>
<html>
<head>
<title>XMLHttpRequest: send() - non same-origin</title>
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
<base>
</head>
<body>
<div id="log"></div>
<script src="/common/get-host-info.sub.js"></script>
<script>
// Setting base URL before running the tests
var host_info = get_host_info();
document.getElementsByTagName("base")[0].setAttribute("href", host_info.HTTP_REMOTE_ORIGIN);
function url(url) {
test(function() {
var client = new XMLHttpRequest()
client.open("GET", url, false)
assert_throws_dom("NetworkError", function() { client.send() })
}, document.title + " (" + url + ")")
}
url("mailto:test@example.org")
url("tel:+31600000000")
url(host_info.HTTP_REMOTE_ORIGIN)
url("javascript:alert('FAIL')")
url("folder.txt")
url("about:blank")
url("blob:bogusidentifier")
</script>
</body>
</html>
|