OLD | NEW |
1 http://localhost:8000/security/XFrameOptions/resources/x-frame-options-parent-sa
me-origin-ancestor.html - willSendRequest <NSURLRequest URL http://localhost:800
0/security/XFrameOptions/resources/x-frame-options-parent-same-origin-ancestor.h
tml, main document URL http://127.0.0.1:8000/security/XFrameOptions/x-frame-opti
ons-ancestors-same-origin-deny.html, http method GET> redirectResponse (null) | 1 http://localhost:8000/security/XFrameOptions/resources/x-frame-options-parent-sa
me-origin-ancestor.html - willSendRequest <NSURLRequest URL http://localhost:800
0/security/XFrameOptions/resources/x-frame-options-parent-same-origin-ancestor.h
tml, main document URL http://127.0.0.1:8000/security/XFrameOptions/x-frame-opti
ons-ancestors-same-origin-deny.html, http method GET> redirectResponse (null) |
2 http://localhost:8000/security/XFrameOptions/resources/x-frame-options-parent-sa
me-origin-ancestor.html - didReceiveResponse <NSURLResponse http://localhost:800
0/security/XFrameOptions/resources/x-frame-options-parent-same-origin-ancestor.h
tml, http status code 200> | 2 http://localhost:8000/security/XFrameOptions/resources/x-frame-options-parent-sa
me-origin-ancestor.html - didReceiveResponse <NSURLResponse http://localhost:800
0/security/XFrameOptions/resources/x-frame-options-parent-same-origin-ancestor.h
tml, http status code 200> |
3 http://localhost:8000/security/XFrameOptions/resources/x-frame-options-parent-sa
me-origin-ancestor.html - didFinishLoading | 3 http://localhost:8000/security/XFrameOptions/resources/x-frame-options-parent-sa
me-origin-ancestor.html - didFinishLoading |
4 http://127.0.0.1:8000/security/XFrameOptions/resources/x-frame-options-parent-sa
me-origin-deny.cgi - willSendRequest <NSURLRequest URL http://127.0.0.1:8000/sec
urity/XFrameOptions/resources/x-frame-options-parent-same-origin-deny.cgi, main
document URL http://127.0.0.1:8000/security/XFrameOptions/x-frame-options-ancest
ors-same-origin-deny.html, http method GET> redirectResponse (null) | 4 http://127.0.0.1:8000/security/XFrameOptions/resources/x-frame-options-parent-sa
me-origin-deny.cgi - willSendRequest <NSURLRequest URL http://127.0.0.1:8000/sec
urity/XFrameOptions/resources/x-frame-options-parent-same-origin-deny.cgi, main
document URL http://127.0.0.1:8000/security/XFrameOptions/x-frame-options-ancest
ors-same-origin-deny.html, http method GET> redirectResponse (null) |
5 CONSOLE MESSAGE: Refused to display 'http://127.0.0.1:8000/security/XFrameOption
s/resources/x-frame-options-parent-same-origin-deny.cgi' in a frame because it s
et 'X-Frame-Options' to 'sameorigin'. | 5 CONSOLE ERROR: Refused to display 'http://127.0.0.1:8000/security/XFrameOptions/
resources/x-frame-options-parent-same-origin-deny.cgi' in a frame because it set
'X-Frame-Options' to 'sameorigin'. |
6 This tests verifies that 'X-Frame-Options: SAMEORIGIN' blocks sameorigin.com ->
crossorigin.com -> sameorigin.com ancestor chains. | 6 This tests verifies that 'X-Frame-Options: SAMEORIGIN' blocks sameorigin.com ->
crossorigin.com -> sameorigin.com ancestor chains. |
7 | 7 |
8 There should be content in the iframe below, but not in its child frame. | 8 There should be content in the iframe below, but not in its child frame. |
9 | 9 |
10 | 10 |
11 | 11 |
12 -------- | 12 -------- |
13 Frame: '<!--framePath //<!--frame0-->-->' | 13 Frame: '<!--framePath //<!--frame0-->-->' |
14 -------- | 14 -------- |
15 The inner frame should not render any content, as this frame is cross-origin. | 15 The inner frame should not render any content, as this frame is cross-origin. |
16 | 16 |
17 | 17 |
18 | 18 |
19 -------- | 19 -------- |
20 Frame: '<!--framePath //<!--frame0-->/<!--frame0-->-->' | 20 Frame: '<!--framePath //<!--frame0-->/<!--frame0-->-->' |
21 -------- | 21 -------- |
22 | 22 |
OLD | NEW |