summaryrefslogtreecommitdiffstats
path: root/testing/web-platform/tests/referrer-policy/generic/meta-referrer-removed-2.http.html
blob: 42f73e878155ecbafd3997fb7d1844b954900878 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
<!DOCTYPE html>
<head>
  <script src="/resources/testharness.js"></script>
  <script src="/resources/testharnessreport.js"></script>

  <meta name="referrer" content="no-referrer" id="referrermeta">
</head>
<body>
  <script>
    async function fetchAndGetReferrer() {
      let response = await fetch('/common/security-features/subresource/xhr.py');
      let data = await response.json();
      return data.headers.referer;
    }

    promise_test(async t => {
      assert_equals(await fetchAndGetReferrer(), undefined,
                    'referrer should not be set');

      // Add second meta tag.
      const second_meta = document.createElement('meta');
      second_meta.name = 'referrer';
      second_meta.content = 'strict-origin';
      document.head.appendChild(second_meta);
      // Second meta should override the first.
      assert_equals(await fetchAndGetReferrer(), location.origin + '/',
                    'referrer should be origin only');

      second_meta.remove();
      assert_equals(await fetchAndGetReferrer(), window.location.origin + '/',
                    'referrer should be origin only');
    }, 'referrer policy does not change when second <meta name="referrer"> is removed');
  </script>
</body>