OLD | NEW |
(Empty) | |
| 1 if (this.document === undefined) { |
| 2 importScripts("/resources/testharness.js"); |
| 3 importScripts("../resources/utils.js"); |
| 4 } |
| 5 |
| 6 function requestForbiddenHeaders(desc, forbiddenHeaders) { |
| 7 var url = RESOURCES_DIR + "inspect-headers.py"; |
| 8 var requestInit = {"headers": forbiddenHeaders} |
| 9 var urlParameters = "?headers=" + Object.keys(forbiddenHeaders).join("|"); |
| 10 |
| 11 promise_test(function(test){ |
| 12 return fetch(url + urlParameters, requestInit).then(function(resp) { |
| 13 assert_equals(resp.status, 200, "HTTP status is 200"); |
| 14 assert_equals(resp.type , "basic", "Response's type is basic"); |
| 15 for (var header in forbiddenHeaders) |
| 16 assert_not_equals(resp.headers.get("x-request-" + header), forbiddenHead
ers[header], header + " does not have the value we defined"); |
| 17 }); |
| 18 }, desc); |
| 19 } |
| 20 |
| 21 requestForbiddenHeaders("Accept-Charset is a forbidden request header", {"Accept
-Charset": "utf-8"}); |
| 22 requestForbiddenHeaders("Accept-Encoding is a forbidden request header", {"Accep
t-Encoding": ""}); |
| 23 |
| 24 requestForbiddenHeaders("Access-Control-Request-Headers is a forbidden request h
eader", {"Access-Control-Request-Headers": ""}); |
| 25 requestForbiddenHeaders("Access-Control-Request-Method is a forbidden request he
ader", {"Access-Control-Request-Method": ""}); |
| 26 requestForbiddenHeaders("Connection is a forbidden request header", {"Connection
": "close"}); |
| 27 requestForbiddenHeaders("Content-Length is a forbidden request header", {"Conten
t-Length": "42"}); |
| 28 requestForbiddenHeaders("Cookie is a forbidden request header", {"Cookie": "cook
ie=none"}); |
| 29 requestForbiddenHeaders("Cookie2 is a forbidden request header", {"Cookie2": "co
okie2=none"}); |
| 30 requestForbiddenHeaders("Date is a forbidden request header", {"Date": "Wed, 04
May 1988 22:22:22 GMT"}); |
| 31 requestForbiddenHeaders("DNT is a forbidden request header", {"DNT": "4"}); |
| 32 requestForbiddenHeaders("Expect is a forbidden request header", {"Expect": "100-
continue"}); |
| 33 requestForbiddenHeaders("Host is a forbidden request header", {"Host": "http://w
rong-host.com"}); |
| 34 requestForbiddenHeaders("Keep-Alive is a forbidden request header", {"Keep-Alive
": "timeout=15"}); |
| 35 requestForbiddenHeaders("Origin is a forbidden request header", {"Origin": "http
://wrong-origin.com"}); |
| 36 requestForbiddenHeaders("Referer is a forbidden request header", {"Referer": "ht
tp://wrong-referer.com"}); |
| 37 requestForbiddenHeaders("TE is a forbidden request header", {"TE": "trailers"}); |
| 38 requestForbiddenHeaders("Trailer is a forbidden request header", {"Trailer": "Ac
cept"}); |
| 39 requestForbiddenHeaders("Transfer-Encoding is a forbidden request header", {"Tra
nsfer-Encoding": "chunked"}); |
| 40 requestForbiddenHeaders("Upgrade is a forbidden request header", {"Upgrade": "HT
TP/2.0"}); |
| 41 requestForbiddenHeaders("Via is a forbidden request header", {"Via": "1.1 nowher
e.com"}); |
| 42 requestForbiddenHeaders("Proxy- is a forbidden request header", {"Proxy-": "valu
e"}); |
| 43 requestForbiddenHeaders("Proxy-Test is a forbidden request header", {"Proxy-Test
": "value"}); |
| 44 requestForbiddenHeaders("Sec- is a forbidden request header", {"Sec-": "value"})
; |
| 45 requestForbiddenHeaders("Sec-Test is a forbidden request header", {"Sec-Test": "
value"}); |
| 46 |
| 47 done(); |
| 48 |
OLD | NEW |