| OLD | NEW |
| (Empty) | |
| 1 <?php |
| 2 header("Content-Security-Policy: upgrade-insecure-requests"); |
| 3 ?> |
| 4 <!DOCTYPE html> |
| 5 <html> |
| 6 <head> |
| 7 <title>Upgrade Insecure Requests: top-frame navigation inside iframe (no upg
rade expected)</title> |
| 8 <script> |
| 9 if (window.testRunner) { |
| 10 testRunner.dumpAsText(); |
| 11 testRunner.waitUntilDone(); |
| 12 } |
| 13 </script> |
| 14 |
| 15 </head> |
| 16 <body> |
| 17 <!-- This is a bit of a hack. UPGRADE doesn't upgrade the port number. So if |
| 18 the url is upgraded, the url becomes invalid (https over the 8080 port). |
| 19 The expected behavior is that the url is not upgraded and the page load. --> |
| 20 <iframe |
| 21 sandbox="allow-scripts allow-top-navigation" |
| 22 src="https://example.test:8443/security/upgrade-insecure-requests/resource
s/navigate-top-frame.php?url=http://example.test:8080/misc/resources/success-not
ify-done.html" |
| 23 ></iframe> |
| 24 </body> |
| 25 </html> |
| OLD | NEW |