| OLD | NEW |
| (Empty) |
| 1 // Copyright 2016 The Chromium Authors. All rights reserved. | |
| 2 // Use of this source code is governed by a BSD-style license that can be | |
| 3 // found in the LICENSE file. | |
| 4 | |
| 5 #include "core/fetch/CrossOriginAccessControl.h" | |
| 6 | |
| 7 #include "platform/network/ResourceRequest.h" | |
| 8 #include "platform/weborigin/SecurityOrigin.h" | |
| 9 #include "testing/gtest/include/gtest/gtest.h" | |
| 10 #include "wtf/RefPtr.h" | |
| 11 #include "wtf/text/WTFString.h" | |
| 12 | |
| 13 namespace blink { | |
| 14 | |
| 15 namespace { | |
| 16 | |
| 17 class CreateAccessControlPreflightRequestTest : public ::testing::Test { | |
| 18 protected: | |
| 19 virtual void SetUp() { | |
| 20 m_securityOrigin = SecurityOrigin::createFromString("http://example.com"); | |
| 21 } | |
| 22 | |
| 23 RefPtr<SecurityOrigin> m_securityOrigin; | |
| 24 }; | |
| 25 | |
| 26 TEST_F(CreateAccessControlPreflightRequestTest, LexicographicalOrder) { | |
| 27 ResourceRequest request; | |
| 28 request.addHTTPHeaderField("Orange", "Orange"); | |
| 29 request.addHTTPHeaderField("Apple", "Red"); | |
| 30 request.addHTTPHeaderField("Kiwifruit", "Green"); | |
| 31 request.addHTTPHeaderField("Content-Type", "application/octet-stream"); | |
| 32 request.addHTTPHeaderField("Strawberry", "Red"); | |
| 33 | |
| 34 ResourceRequest preflight = | |
| 35 createAccessControlPreflightRequest(request, m_securityOrigin.get()); | |
| 36 | |
| 37 EXPECT_EQ("apple,content-type,kiwifruit,orange,strawberry", | |
| 38 preflight.httpHeaderField("Access-Control-Request-Headers")); | |
| 39 } | |
| 40 | |
| 41 TEST_F(CreateAccessControlPreflightRequestTest, ExcludeSimpleHeaders) { | |
| 42 ResourceRequest request; | |
| 43 request.addHTTPHeaderField("Accept", "everything"); | |
| 44 request.addHTTPHeaderField("Accept-Language", "everything"); | |
| 45 request.addHTTPHeaderField("Content-Language", "everything"); | |
| 46 request.addHTTPHeaderField("Save-Data", "on"); | |
| 47 | |
| 48 ResourceRequest preflight = | |
| 49 createAccessControlPreflightRequest(request, m_securityOrigin.get()); | |
| 50 | |
| 51 EXPECT_EQ("", preflight.httpHeaderField("Access-Control-Request-Headers")); | |
| 52 } | |
| 53 | |
| 54 TEST_F(CreateAccessControlPreflightRequestTest, | |
| 55 ExcludeSimpleContentTypeHeader) { | |
| 56 ResourceRequest request; | |
| 57 request.addHTTPHeaderField("Content-Type", "text/plain"); | |
| 58 | |
| 59 ResourceRequest preflight = | |
| 60 createAccessControlPreflightRequest(request, m_securityOrigin.get()); | |
| 61 | |
| 62 EXPECT_EQ("", preflight.httpHeaderField("Access-Control-Request-Headers")); | |
| 63 } | |
| 64 | |
| 65 TEST_F(CreateAccessControlPreflightRequestTest, IncludeNonSimpleHeader) { | |
| 66 ResourceRequest request; | |
| 67 request.addHTTPHeaderField("X-Custom-Header", "foobar"); | |
| 68 | |
| 69 ResourceRequest preflight = | |
| 70 createAccessControlPreflightRequest(request, m_securityOrigin.get()); | |
| 71 | |
| 72 EXPECT_EQ("x-custom-header", | |
| 73 preflight.httpHeaderField("Access-Control-Request-Headers")); | |
| 74 } | |
| 75 | |
| 76 TEST_F(CreateAccessControlPreflightRequestTest, | |
| 77 IncludeNonSimpleContentTypeHeader) { | |
| 78 ResourceRequest request; | |
| 79 request.addHTTPHeaderField("Content-Type", "application/octet-stream"); | |
| 80 | |
| 81 ResourceRequest preflight = | |
| 82 createAccessControlPreflightRequest(request, m_securityOrigin.get()); | |
| 83 | |
| 84 EXPECT_EQ("content-type", | |
| 85 preflight.httpHeaderField("Access-Control-Request-Headers")); | |
| 86 } | |
| 87 | |
| 88 } // namespace | |
| 89 | |
| 90 } // namespace blink | |
| OLD | NEW |