summaryrefslogtreecommitdiffstats
path: root/testing/web-platform/tests/server-timing/server_timing_headers_not_visible_in_fetch.https.html
blob: 3502f491d5a62c982b8ead79e9b0063372b5b431 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
<!DOCTYPE html>
<head>
    <meta charset='utf-8' />
    <script src="/resources/testharness.js"></script>
    <script src="/resources/testharnessreport.js"></script>
    <script src="/common/get-host-info.sub.js"></script>
    <script>
      const {HTTPS_REMOTE_ORIGIN} = get_host_info()
      promise_test(async t => {
        const response = await fetch(`${HTTPS_REMOTE_ORIGIN}/server-timing/resources/blue_cors.png`, {mode: "cors"});
        assert_equals(response.headers.has("server-timing"), false);
      }, "Server-Timing headers should be explicitly allowed by CORS");
    </script>
</head>