LayoutTests/http/tests/security/script-crossorigin-redirect-credentials.html - Issue 149643003: Improve handling of CORS redirects for some resource loads.

Side by Side Diff: LayoutTests/http/tests/security/script-crossorigin-redirect-credentials.html

Issue 149643003: Improve handling of CORS redirects for some resource loads. (Closed) Base URL: https://chromium.googlesource.com/chromium/blink.git@master

Patch Set: Track source origin via ResourceLoaderOptions.securityOrigin Created 6 years, 10 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View unified diff | Download patch

« no previous file with comments | « LayoutTests/http/tests/security/script-crossorigin-redirect-anonymous-expected.txt ('k') | LayoutTests/http/tests/security/script-crossorigin-redirect-credentials-expected.txt » ('j') | Source/core/fetch/CrossOriginAccessControl.h » ('J')
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Hide Comments ('s')

OLD	NEW
(Empty)
	1 <!DOCTYPE HTML>

	2 <script src="/js-test-resources/js-test.js"></script>

	3 <script>

	4 description("Testing the handling of CORS-enabled script fetch in the presence o f 'credentialled' redirects.");

	5

	6 // Explain the short form descriptions ('=>' representing the redirect.)

	7 debug("PASS/FAIL descriptions are of the form, 'CORS request type': 'redirect CO RS type' => 'resource'");

	8 debug("");

	9

	10 var redirect_cors = "use-credentials";

	11

	12 window.jsTestIsAsync = true;

	13 if (window.testRunner)

	14 testRunner.dumpAsText();

	15

	16 function finish() {

	17 if (window.testRunner)

	18 finishJSTest();

	19 }

	20

	21 function fail() {

	22 debug("FAIL: " + this.description);

	23 runNextTest();

	24 }

	25

	26 function pass() {

	27 debug("PASS: " + this.description);

	28 runNextTest();

	29 }

	30

	31 var tests = [

	32 { description: "Anonymous request: credentialled => no-CORS script resource. ",

	33 url: "http://localhost:8000/security/resources/localScript.js",

	34 // Redirect is allowed, but fails access check on the non-CORS resource.

	35 success: false,

	36 access: "anonymous"},

	37 { description: "Anonymous request: credentialled => anonymous CORS script re source.",

	38 url: "http://localhost:8000/security/resources/script-allow-star.php",

	39 // Redirect is allowed, as is access to the CORS resource.

	40 success: true,

	41 access: "anonymous"},

	42 { description: "Credentialled request: credentialled => credentialled-CORS s cript resource (same origin)",

	43 url: "http://127.0.0.1:8000/security/resources/script-allow-credentials.ph p",

	44 // Redirect is allowed, as is access to the CORS resource.

	45 success: true,

	46 access: "use-credentials"},

	47 { description: "Credentialled request: credentialled => credentialled-CORS s cript resource (cross origin)",

	48 url: "http://127.0.0.1:8080/security/resources/script-allow-credentials.ph p",

	49 // Redirect is allowed, but source origin mutates to 'null', so credential led resource not accessible.

	50 success: false,

	51 access: "use-credentials"},

	52 { description: "Credentialled request: credentialled => anonymous-CORS scrip t resource (cross origin)",

	53 url: "http://127.0.0.1:8000/security/resources/script-allow-star.php",

	54 // Redirect is allowed, source origin mutates to 'null', but anonymous res ource is accessible.

	55 success: true,

	56 access: "anonymous"},

	57 ];

	58

	59 function runNextTest() {

	60 if (!tests.length) {

	61 finish();

	62 return;

	63 }

	64 var test = tests.shift();

	65 var script = document.createElement("script");

	66 script.onload = test.success ? pass : fail;

	67 script.onerror = test.success ? fail : pass;

	68 script.crossOrigin = test.access;

	69 script.description = test.description;

	70 var args = [ "mode=" + redirect_cors,

	71 "url=" + test.url];

	72 script.src = "http://localhost:8000/security/resources/cors-redirect.php?" + args.join("&");

	73 document.body.appendChild(script);

	74 }

	75 window.onload = runNextTest;

	76 </script>

OLD	NEW