1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
|
// META: script=../resources/utils.js
function corsFilter(corsUrl, headerName, headerValue, isFiltered) {
var url = corsUrl + "?pipe=header(" + headerName + "," + encodeURIComponent(headerValue) +")|header(Access-Control-Allow-Origin,*)";
promise_test(function(test) {
return fetch(url).then(function(resp) {
assert_equals(resp.status, 200, "Fetch success with code 200");
assert_equals(resp.type , "cors", "CORS fetch's response has cors type");
if (!isFiltered) {
assert_equals(resp.headers.get(headerName), headerValue,
headerName + " header should be included in response with value: " + headerValue);
} else {
assert_false(resp.headers.has(headerName), "UA should exclude " + headerName + " header from response");
}
test.done();
});
}, "CORS filter on " + headerName + " header");
}
function corsExposeFilter(corsUrl, headerName, headerValue, isForbidden, withCredentials) {
var url = corsUrl + "?pipe=header(" + headerName + "," + encodeURIComponent(headerValue) +")|" +
"header(Access-Control-Allow-Origin, http://{{host}}:{{ports[http][0]}})" +
"header(Access-Control-Allow-Credentials, true)" +
"header(Access-Control-Expose-Headers," + headerName + ")";
var title = "CORS filter on " + headerName + " header, header is " + (isForbidden ? "forbidden" : "exposed");
if (withCredentials)
title+= "(credentials = include)";
promise_test(function(test) {
return fetch(new Request(url, { credentials: withCredentials ? "include" : "omit" })).then(function(resp) {
assert_equals(resp.status, 200, "Fetch success with code 200");
assert_equals(resp.type , "cors", "CORS fetch's response has cors type");
if (!isForbidden) {
assert_equals(resp.headers.get(headerName), headerValue,
headerName + " header should be included in response with value: " + headerValue);
} else {
assert_false(resp.headers.has(headerName), "UA should exclude " + headerName + " header from response");
}
test.done();
});
}, title);
}
var url = "http://{{host}}:{{ports[http][1]}}" + dirname(location.pathname) + RESOURCES_DIR + "top.txt";
corsFilter(url, "Cache-Control", "no-cache", false);
corsFilter(url, "Content-Language", "fr", false);
corsFilter(url, "Content-Type", "text/html", false);
corsFilter(url, "Expires","04 May 1988 22:22:22 GMT" , false);
corsFilter(url, "Last-Modified", "04 May 1988 22:22:22 GMT", false);
corsFilter(url, "Pragma", "no-cache", false);
corsFilter(url, "Content-Length", "3" , false); // top.txt contains "top"
corsFilter(url, "Age", "27", true);
corsFilter(url, "Server", "wptServe" , true);
corsFilter(url, "Warning", "Mind the gap" , true);
corsFilter(url, "Set-Cookie", "name=value" , true);
corsFilter(url, "Set-Cookie2", "name=value" , true);
corsExposeFilter(url, "Age", "27", false);
corsExposeFilter(url, "Server", "wptServe" , false);
corsExposeFilter(url, "Warning", "Mind the gap" , false);
corsExposeFilter(url, "Set-Cookie", "name=value" , true);
corsExposeFilter(url, "Set-Cookie2", "name=value" , true);
corsExposeFilter(url, "Set-Cookie", "name=value" , true, true);
corsExposeFilter(url, "Set-Cookie2", "name=value" , true, true);
done();
|
