File: sandboxed-iframe.html

package info (click to toggle)
thunderbird 1%3A140.4.0esr-1~deb13u1
  • links: PTS, VCS
  • area: main
  • in suites: trixie
  • size: 4,609,412 kB
  • sloc: cpp: 7,672,442; javascript: 5,901,613; ansic: 3,898,954; python: 1,413,343; xml: 653,997; asm: 462,286; java: 180,927; sh: 113,489; makefile: 20,460; perl: 14,288; objc: 13,059; yacc: 4,583; pascal: 3,352; lex: 1,720; ruby: 1,222; exp: 762; sql: 715; awk: 580; php: 436; lisp: 430; sed: 70; csh: 10
file content (34 lines) | stat: -rw-r--r-- 720 bytes parent folder | download | duplicates (31) 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
 
<!doctype html>
<html>
<script>
async function no_cors_should_be_rejected() {
  let thrown = false;
  try {
    const resp = await fetch('top.txt');
  } catch (e) {
    thrown = true;
  }
  if (!thrown) {
    throw Error('fetching "top.txt" should be rejected.');
  }
}

async function null_origin_should_be_accepted() {
  const url = 'top.txt?pipe=header(access-control-allow-origin,null)|' +
              'header(cache-control,no-store)';
  const resp = await fetch(url);
}

async function test() {
  try {
    await no_cors_should_be_rejected();
    await null_origin_should_be_accepted();
    parent.postMessage('PASS', '*');
  } catch (e) {
    parent.postMessage(e.message, '*');
  }
}

test();
</script>
</html>