| OLD | NEW |
| (Empty) | |
| 1 <?php |
| 2 header("Content-Security-Policy: upgrade-insecure-requests"); |
| 3 ?> |
| 4 <!DOCTYPE html> |
| 5 <html> |
| 6 <title>Upgrade Insecure Requests: link no upgrade.</title> |
| 7 <head> |
| 8 <script> |
| 9 if (window.testRunner) { |
| 10 testRunner.dumpAsText(); |
| 11 testRunner.waitUntilDone(); |
| 12 } |
| 13 |
| 14 function click() { |
| 15 document.getElementById("link").click(); |
| 16 } |
| 17 </script> |
| 18 </head> |
| 19 <body onload="click()"> |
| 20 <!-- This is a bit of a hack. UPGRADE doesn't upgrade the port number. So if |
| 21 the url is upgraded, the url becomes invalid (https over the 8080 port). |
| 22 The expected behavior is that the url is not upgraded and the page load. --> |
| 23 <a id="link" href="http://example.test:8080/resources/notify-done.html">Clic
k me</a> |
| 24 </body> |
| 25 </html> |
| OLD | NEW |