diff options
Diffstat (limited to 'testing/web-platform/tests/x-frame-options/deny.html')
| -rw-r--r-- | testing/web-platform/tests/x-frame-options/deny.html | 43 |
1 files changed, 43 insertions, 0 deletions
diff --git a/testing/web-platform/tests/x-frame-options/deny.html b/testing/web-platform/tests/x-frame-options/deny.html new file mode 100644 index 0000000000..90f65d3f43 --- /dev/null +++ b/testing/web-platform/tests/x-frame-options/deny.html @@ -0,0 +1,43 @@ +<!DOCTYPE html> +<meta charset="utf-8"> +<title>X-Frame-Options variations of DENY</title> +<script src="/resources/testharness.js"></script> +<script src="/resources/testharnessreport.js"></script> +<script src="./support/helper.sub.js"></script> + +<body> +<script> +"use strict"; + +xfo_simple_tests({ + headerValue: `DENY`, + sameOriginAllowed: false, + crossOriginAllowed: false +}); + +xfo_simple_tests({ + headerValue: `denY`, + sameOriginAllowed: false, + crossOriginAllowed: false +}); + +xfo_simple_tests({ + headerValue: ` DENY `, + sameOriginAllowed: false, + crossOriginAllowed: false +}); + +xfo_simple_tests({ + headerValue: `DENY`, + cspValue: `default-src 'self'`, + sameOriginAllowed: false, + crossOriginAllowed: false +}); + +xfo_simple_tests({ + headerValue: `DENY`, + cspValue: `frame-ancestors 'self'`, + sameOriginAllowed: true, + crossOriginAllowed: false +}); +</script> |