| OLD | NEW |
| (Empty) | |
| 1 <?php |
| 2 header("Content-Security-Policy: upgrade-insecure-requests"); |
| 3 ?> |
| 4 <!DOCTYPE html> |
| 5 <html> |
| 6 <head> |
| 7 <title>Upgrade Insecure Requests: top-frame navigation inside iframe (upgrad
e expected)</title> |
| 8 <script> |
| 9 if (window.testRunner) { |
| 10 testRunner.dumpAsText(); |
| 11 testRunner.waitUntilDone(); |
| 12 } |
| 13 </script> |
| 14 |
| 15 </head> |
| 16 <body> |
| 17 <!-- This is a bit of a hack. UPGRADE doesn't upgrade the port number, so we |
| 18 specify this non-existent URL ('http' over port 8443). If UPGRADE doesn't |
| 19 work, it won't load. |
| 20 The expected behavior is that the url is upgraded and the page loaded. --> |
| 21 <iframe |
| 22 sandbox="allow-scripts allow-top-navigation" |
| 23 src="https://example.test:8443/security/upgrade-insecure-requests/resource
s/navigate-top-frame.php?url=http://127.0.0.1:8443/misc/resources/success-notify
-done.html" |
| 24 ></iframe> |
| 25 </body> |
| 26 </html> |
| OLD | NEW |