diff options
Diffstat (limited to 'testing/web-platform/tests/websockets/security')
3 files changed, 38 insertions, 0 deletions
diff --git a/testing/web-platform/tests/websockets/security/001.html b/testing/web-platform/tests/websockets/security/001.html new file mode 100644 index 0000000000..a34ae39639 --- /dev/null +++ b/testing/web-platform/tests/websockets/security/001.html @@ -0,0 +1,16 @@ +<!doctype html> +<title>WebSockets: wrong accept key</title> +<script src=/resources/testharness.js></script> +<script src=/resources/testharnessreport.js></script> +<script src=../constants.sub.js></script> +<meta name="variant" content="?default"> +<meta name="variant" content="?wss"> +<div id=log></div> +<script> +async_test(function(t) { + var ws = new WebSocket(SCHEME_DOMAIN_PORT+'/wrong_accept_key'); + ws.onclose = t.step_func(function(e) { + t.done(); + }); +}); +</script> diff --git a/testing/web-platform/tests/websockets/security/002.html b/testing/web-platform/tests/websockets/security/002.html new file mode 100644 index 0000000000..3286cca980 --- /dev/null +++ b/testing/web-platform/tests/websockets/security/002.html @@ -0,0 +1,20 @@ +<!doctype html> +<title>WebSockets: check Sec-WebSocket-Key</title> +<script src=/resources/testharness.js></script> +<script src=/resources/testharnessreport.js></script> +<script src=../constants.sub.js></script> +<meta name="variant" content="?default"> +<meta name="variant" content="?wss"> +<div id=log></div> +<script> +async_test(function(t) { + var xhr = new XMLHttpRequest(); + xhr.onload = t.step_func(function() { + assert_equals(xhr.responseText, 'PASS'); + t.done(); + }); + xhr.open("GET", "check.py", true); + xhr.setRequestHeader('Sec-WebSocket-Key', 'jW7qmdXj5Kk5jTClF1BN3'); + xhr.send(null); +}); +</script> diff --git a/testing/web-platform/tests/websockets/security/check.py b/testing/web-platform/tests/websockets/security/check.py new file mode 100644 index 0000000000..716b837f49 --- /dev/null +++ b/testing/web-platform/tests/websockets/security/check.py @@ -0,0 +1,2 @@ +def main(request, response): + return b"FAIL" if b'Sec-WebSocket-Key' in request.headers else b"PASS" |