File: cookies-without-samesite-must-be-secure.https.html

package info (click to toggle)
firefox-esr 115.15.0esr-1~deb12u1
  • links: PTS, VCS
  • area: main
  • in suites: bookworm
  • size: 3,659,216 kB
  • sloc: cpp: 6,676,686; javascript: 5,690,965; ansic: 3,328,546; python: 1,120,594; asm: 397,163; xml: 180,531; java: 178,838; sh: 68,930; makefile: 20,999; perl: 12,595; objc: 12,561; yacc: 4,583; cs: 3,846; pascal: 2,840; lex: 1,720; ruby: 1,079; exp: 762; php: 436; lisp: 258; awk: 247; sql: 66; sed: 54; csh: 10
file content (20 lines) | stat: -rw-r--r-- 837 bytes parent folder | download | duplicates (29)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
<!DOCTYPE html>
<meta charset="utf-8">
<meta name="timeout" content="long">
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
<script src="/cookies/resources/cookie-helper.sub.js"></script>
<script>
promise_test(t => {
  var value = "" + Math.random();
  return resetSameSiteNoneCookies(SECURE_ORIGIN, value)
    .then(_ => {
      return credFetch(SECURE_ORIGIN + "/cookies/resources/list.py")
        .then(r => r.json())
        .then(cookies => {
          assert_not_equals(cookies["samesite_none_insecure"], value, "Non-Secure SameSite=None cookie is rejected.");
          assert_equals(cookies["samesite_none_secure"], value, "Secure SameSite=None cookie is set.");
        })
    });
}, "SameSite=None cookies are rejected unless the Secure attribute is set.");
</script>