dom/security/test/csp/file_redirect_report.sjs


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17

// https://bugzilla.mozilla.org/show_bug.cgi?id=650386
// This SJS file serves as CSP violation report target
// and issues a redirect, to make sure the browser does not post to the target
// of the redirect, per CSP spec.
// This handles 301, 302, 303 and 307 redirects. The HTTP status code
// returned/type of redirect to do comes from the query string
// parameter
function handleRequest(request, response) {
  response.setHeader("Cache-Control", "no-cache", false);

  var redirect = request.queryString;

  var loc = "http://example.com/some/fake/path";
  response.setStatusLine("1.1", redirect, "Found");
  response.setHeader("Location", loc, false);
  return;
}