1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
|
// META: script=/common/get-host-info.sub.js
//
// The following tests assume the policy `Connection-Allowlist: (response-origin)` has been set.
const port = get_host_info().HTTP_PORT_ELIDED;
const SUCCESS = true;
const FAILURE = false;
function fetch_test(origin, expectation) {
if (expectation === FAILURE) {
return promise_test(async t => {
const fetcher = fetch(`${origin}/common/blank-with-cors.html`, { mode: "cors", credential: "omit" });
return promise_rejects_js(t, TypeError, fetcher);
}, `Fetch to ${origin} fails.`);
}
promise_test(async t => {
const r = await fetch(`${origin}/common/blank-with-cors.html`, { mode: "cors", credential: "omit" });
assert_equals(r.status, 200);
}, `Fetch to ${origin} succeeds.`);
}
const test_cases = [
// We're loading this page from `http://hosts[][]`, so that origin should
// succeed, while its subdomains should fail:
{ origin: "http://{{hosts[][]}}" + port, expectation: SUCCESS },
{ origin: "http://{{hosts[][www]}}" + port, expectation: FAILURE },
{ origin: "http://{{hosts[][www1]}}" + port, expectation: FAILURE },
{ origin: "http://{{hosts[][www2]}}" + port, expectation: FAILURE },
{ origin: "http://{{hosts[][天気の良い日]}}" + port, expectation: FAILURE },
{ origin: "http://{{hosts[][élève]}}" + port, expectation: FAILURE },
// Cross-site origins should fail as well:
{ origin: "http://{{hosts[alt][]}}" + port, expectation: FAILURE },
{ origin: "http://{{hosts[alt][www]}}" + port, expectation: FAILURE },
{ origin: "http://{{hosts[alt][www1]}}" + port, expectation: FAILURE },
{ origin: "http://{{hosts[alt][www2]}}" + port, expectation: FAILURE },
{ origin: "http://{{hosts[alt][天気の良い日]}}" + port, expectation: FAILURE },
{ origin: "http://{{hosts[alt][élève]}}" + port, expectation: FAILURE },
];
for (let i = 0; i < test_cases.length; i++) {
fetch_test(test_cases[i].origin, test_cases[i].expectation);
}
|
