| OLD | NEW |
| 1 <html> | 1 <html> |
| 2 <body> | 2 <body> |
| 3 <p>Test that setRequestHeader cannot be used to alter security-sensitive headers | 3 <p>Test that setRequestHeader cannot be used to alter security-sensitive headers |
| 4 for file:// urls.</p> | 4 for file:// urls.</p> |
| 5 <pre id=result>FAIL: script didn't run or raised an unexpected exception.</pre> | 5 <pre id=result>FAIL: script didn't run or raised an unexpected exception.</pre> |
| 6 <script> | 6 <script> |
| 7 if (window.testRunner) | 7 if (window.testRunner) |
| 8 testRunner.dumpAsText(); | 8 testRunner.dumpAsText(); |
| 9 | 9 |
| 10 if (window.location.href.indexOf("file://") != 0) { | 10 if (window.location.href.indexOf("file://") != 0) { |
| (...skipping 20 matching lines...) Expand all Loading... |
| 31 req.setRequestHeader("DNT", "foobar"); | 31 req.setRequestHeader("DNT", "foobar"); |
| 32 req.setRequestHeader("EXPECT", "100-continue"); | 32 req.setRequestHeader("EXPECT", "100-continue"); |
| 33 req.setRequestHeader("HOST", "foobar"); | 33 req.setRequestHeader("HOST", "foobar"); |
| 34 req.setRequestHeader("KEEP-ALIVE", "foobar"); | 34 req.setRequestHeader("KEEP-ALIVE", "foobar"); |
| 35 req.setRequestHeader("ORIGIN", "foobar"); | 35 req.setRequestHeader("ORIGIN", "foobar"); |
| 36 req.setRequestHeader("REFERER", "foobar"); | 36 req.setRequestHeader("REFERER", "foobar"); |
| 37 req.setRequestHeader("TE", "foobar"); | 37 req.setRequestHeader("TE", "foobar"); |
| 38 req.setRequestHeader("TRAILER", "foobar"); | 38 req.setRequestHeader("TRAILER", "foobar"); |
| 39 req.setRequestHeader("TRANSFER-ENCODING", "foobar"); | 39 req.setRequestHeader("TRANSFER-ENCODING", "foobar"); |
| 40 req.setRequestHeader("UPGRADE", "foobar"); | 40 req.setRequestHeader("UPGRADE", "foobar"); |
| 41 req.setRequestHeader("USER-AGENT", "foobar"); | |
| 42 req.setRequestHeader("VIA", "foobar"); | 41 req.setRequestHeader("VIA", "foobar"); |
| 43 | 42 |
| 44 req.setRequestHeader("Proxy-", "foobar"); | 43 req.setRequestHeader("Proxy-", "foobar"); |
| 45 req.setRequestHeader("Proxy-test", "foobar"); | 44 req.setRequestHeader("Proxy-test", "foobar"); |
| 46 req.setRequestHeader("PROXY-FOO", "foobar"); | 45 req.setRequestHeader("PROXY-FOO", "foobar"); |
| 47 | 46 |
| 48 req.setRequestHeader("Sec-", "foobar"); | 47 req.setRequestHeader("Sec-", "foobar"); |
| 49 req.setRequestHeader("Sec-test", "foobar"); | 48 req.setRequestHeader("Sec-test", "foobar"); |
| 50 req.setRequestHeader("SEC-FOO", "foobar"); | 49 req.setRequestHeader("SEC-FOO", "foobar"); |
| 51 | 50 |
| 52 try { | 51 try { |
| 53 req.send(""); | 52 req.send(""); |
| 54 if (req.responseText.match("100-continue|foobar|123456")) | 53 if (req.responseText.match("100-continue|foobar|123456")) |
| 55 document.getElementById("result").textContent = | 54 document.getElementById("result").textContent = |
| 56 req.responseText; | 55 req.responseText; |
| 57 else | 56 else |
| 58 document.getElementById("result").textContent = "SUCCESS"; | 57 document.getElementById("result").textContent = "SUCCESS"; |
| 59 } catch (ex) { | 58 } catch (ex) { |
| 60 document.getElementById("result").textContent = ex; | 59 document.getElementById("result").textContent = ex; |
| 61 } | 60 } |
| 62 } | 61 } |
| 63 </script> | 62 </script> |
| 64 </body> | 63 </body> |
| 65 </html> | 64 </html> |
| OLD | NEW |