dom/security/test/https-first/file_downgrade_view_source.sjs


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30

"use strict";

function handleRequest(request, response) {
  // avoid confusing cache behaviour
  response.setHeader("Cache-Control", "no-cache", false);
  response.setHeader("Content-Type", "text/html", false);

  let query = request.queryString.split("&");
  let scheme = request.scheme;

  if (scheme === "https") {
    if (query.includes("downgrade")) {
      response.setStatusLine("1.1", 400, "Bad Request");
      response.write("Bad Request\n");
      return;
    }
    if (query.includes("upgrade")) {
      response.write("view-source:https://");
      return;
    }
  }

  if (scheme === "http" && query.includes("downgrade")) {
    response.write("view-source:http://");
    return;
  }

  // We should arrive here when the redirection was downraded successful
  response.write("unexpected scheme and query given");
}