summaryrefslogtreecommitdiffstats
path: root/testing/web-platform/tests/cookies/prefix/__secure.header.html
blob: 85665afefd74ca425bd247351770a09742ba019e (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
<!DOCTYPE html>
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
<script src="/cookies/resources/cookie-helper.sub.js"></script>
<script>
  ["", "domain="+document.location.hostname, "MaxAge=10", "HttpOnly"].forEach(extraParams => {
    // Without 'secure'
    set_prefixed_cookie_via_http_test({
      prefix: "__Secure-",
      params: "Path=/;" + extraParams,
      origin: self.origin,
      shouldExistViaHTTP: false,
      title: "__Secure: Non-secure origin: Should not set 'Path=/;" + extraParams + "'"
    });

    set_prefixed_cookie_via_http_test({
      prefix: "__SeCuRe-",
      params: "Path=/;" + extraParams,
      origin: self.origin,
      shouldExistViaHTTP: false,
      title: "__SeCuRe: Non-secure origin: Should not set 'Path=/;" + extraParams + "'"
    });

    // With 'secure'
    set_prefixed_cookie_via_http_test({
      prefix: "__Secure-",
      params: "Secure; Path=/;" + extraParams,
      origin: self.origin,
      shouldExistViaHTTP: false,
      title: "__Secure: Non-secure origin: Should not set 'Secure; Path=/;" + extraParams + "'"
    });

    set_prefixed_cookie_via_http_test({
      prefix: "__SeCuRe-",
      params: "Secure; Path=/;" + extraParams,
      origin: self.origin,
      shouldExistViaHTTP: false,
      title: "__SeCuRe: Non-secure origin: Should not set 'Secure; Path=/;" + extraParams + "'"
    });
  });
</script>