blob: 6ccf484644c9d8c15df87b4c00f73356b991af98 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
|
<!doctype html>
<html>
<meta charset="utf-8">
<script src="/common/utils.js"></script>
<script src="/common/get-host-info.sub.js"></script>
<script>
const TOKEN = token();
const {
HTTP_NOTSAMESITE_ORIGIN,
HTTP_REMOTE_ORIGIN,
HTTP_REMOTE_ORIGIN_WITH_DIFFERENT_PORT
} = get_host_info();
const REDIRECT_DESTINATION =
`${HTTP_REMOTE_ORIGIN_WITH_DIFFERENT_PORT}/fetch/api/resources/stash-put.py` +
`?key=${TOKEN}&value=on`;
const URL =
`${HTTP_REMOTE_ORIGIN}/fetch/api/resources/redirect.py?` +
`delay=500&` +
`allow_headers=foo&` +
`location=${encodeURIComponent(REDIRECT_DESTINATION)}`;
addEventListener('load', () => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.contentWindow.addEventListener('unload', () => {
iframe.contentWindow.fetch(URL, {keepalive: true, headers: {foo: 'bar'}});
});
window.opener.postMessage(TOKEN, '*');
// Do NOT remove `iframe` here. We want to check the case where the nested
// frame is implicitly closed by window closure.
});
</script>
</html>
|