1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
|
var RESOURCES_DIR = "/beacon/resources/";
var referrerOrigin = self.location.origin + '/';
var referrerUrl = self.location.href;
function testReferrerHeader(testBase, expectedReferrer, mayBeBlockedAsMixedContent = false) {
var id = self.token();
var testUrl = testBase + "inspect-header.py?header=referer&cmd=put&id=" + id;
promise_test(function(test) {
const sentBeacon = navigator.sendBeacon(testUrl);
if (mayBeBlockedAsMixedContent && !sentBeacon)
return Promise.resolve();
assert_true(sentBeacon, "SendBeacon Succeeded");
return pollResult(expectedReferrer, id) .then(result => {
assert_equals(result, expectedReferrer, "Correct referrer header result");
});
}, "Test referer header " + testBase);
}
function testOriginHeader(testBase, expectedOrigin, addBody) {
var id = self.token();
var testUrl = testBase + "inspect-header.py?header=origin&cmd=put&id=" + id;
promise_test(function(test) {
const sentBeacon = navigator.sendBeacon(testUrl, addBody ? "data" : undefined);
assert_true(sentBeacon, "SendBeacon Succeeded");
return pollResult(expectedOrigin, id, "origin") .then(result => {
assert_equals(result, expectedOrigin, "Correct origin header result");
});
}, "Test origin header " + testBase + (addBody ? " - with body" : " - without body"));
}
// SendBeacon is an asynchronous and non-blocking request to a web server.
// We may have to create a poll loop to get result from server
function pollResult(expectedReferrer, id, headerName) {
if (!headerName)
headerName = "referer";
var checkUrl = RESOURCES_DIR + "inspect-header.py?header=" + headerName + "&cmd=get&id=" + id;
return new Promise(resolve => {
function checkResult() {
fetch(checkUrl).then(
function(response) {
assert_equals(response.status, 200, "Inspect header response's status is 200");
let result = response.headers.get("x-request-" + headerName);
if (result != undefined) {
resolve(result);
} else {
step_timeout(checkResult.bind(this), 100);
}
});
}
checkResult();
});
}
|
