1 files changed, 38 insertions, 0 deletions
diff --git a/testing/web-platform/tests/xhr/getallresponseheaders-cookies.htm b/testing/web-platform/tests/xhr/getallresponseheaders-cookies.htm
new file mode 100644
index 0000000000..2cd8098185
--- /dev/null
+++ b/testing/web-platform/tests/xhr/getallresponseheaders-cookies.htm
@@ -0,0 +1,38 @@
+<!DOCTYPE html>
+<html>
+  <head>
+    <title>XMLHttpRequest: getAllResponseHeaders() excludes cookies</title>
+    <script src="/resources/testharness.js"></script>
+    <script src="/resources/testharnessreport.js"></script>
+    <link rel="help" href="https://xhr.spec.whatwg.org/#dom-xmlhttprequest-getallresponseheaders" data-tested-assertations="/following::OL[1]/LI[1] /following::OL[1]/LI[3]" />
+  </head>
+  <body>
+    <div id="log"></div>
+    <script>
+      var test = async_test()
+      test.step(function() {
+        var client = new XMLHttpRequest()
+        assert_equals(client.getAllResponseHeaders(), "")
+        client.onreadystatechange = function() {
+          test.step(function() {
+            var headers = client.getAllResponseHeaders().toLowerCase()
+            if(client.readyState == 1) {
+              assert_equals(headers, "")
+            }
+            if(client.readyState > 1) {
+              assert_true(headers.indexOf("\r\n") != -1, "carriage return")
+              assert_true(headers.indexOf("content-type") != -1, "content-type")
+              assert_true(headers.indexOf("x-custom-header") != -1, "x-custom-header")
+              assert_false(headers.indexOf("set-cookie") != -1, "set-cookie")
+              assert_false(headers.indexOf("set-cookie2") != -1, "set-cookie2")
+            }
+            if(client.readyState == 4)
+              test.done()
+          })
+        }
+        client.open("GET", "resources/headers.py")
+        client.send(null)
+      })
+  </script>
+ </body>
+</html>