Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(1037)

Side by Side Diff: LayoutTests/http/tests/security/resources/cors-script.php

Issue 47923008: Block execution of failed 'crossorigin' <script>s. (Closed) Base URL: https://chromium.googlesource.com/chromium/blink.git@master
Patch Set: Rebased Created 7 years, 1 month ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
1 <?php 1 <?php
2 if (strtolower($_GET["cors"]) != "false") { 2 if (strtolower($_GET["cors"]) != "false") {
3 header("Access-Control-Allow-Origin: http://127.0.0.1:8000"); 3 header("Access-Control-Allow-Origin: http://127.0.0.1:8000");
4 } 4 }
5 if (strtolower($_GET["credentials"]) == "true") {
6 header("Access-Control-ALlow-Credentials: true");
7 }
5 header("Content-Type: application/javascript"); 8 header("Content-Type: application/javascript");
6 if (strtolower($_GET["fail"]) == "true") 9 $value = $_GET['value'];
10 if ($value)
11 echo "result = \"" . $value . "\";";
12 else if (strtolower($_GET["fail"]) == "true")
7 echo "throw({toString: function(){ return 'SomeError' }});"; 13 echo "throw({toString: function(){ return 'SomeError' }});";
8 else 14 else
9 echo "alert('script ran.');"; 15 echo "alert('script ran.');";
10 ?> 16 ?>
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698