| <!DOCTYPE html> |
| <meta charset=utf-8> |
| <title>CORS - client hint request headers - Access-Control-Allow-Headers</title> |
| |
| <script src=/resources/testharness.js></script> |
| <script src=/resources/testharnessreport.js></script> |
| <script src=support.js?pipe=sub></script> |
| |
| <h1>Request headers</h1> |
| <div id=log></div> |
| <script> |
| |
| test(function() { |
| var client = new XMLHttpRequest() |
| client.open('GET', CROSSDOMAIN + 'resources/cors-makeheader.py?headers=x-print,', false) |
| client.setRequestHeader('x-print', 'unicorn') |
| client.setRequestHeader('content-type', 'text/plain') |
| client.setRequestHeader('accept', 'test') |
| client.setRequestHeader('accept-language', 'nn') |
| client.setRequestHeader('content-language', 'nn') |
| client.setRequestHeader('save-data', 'on') |
| client.setRequestHeader('device-memory', '1.0') |
| client.setRequestHeader('dpr', '2.0') |
| client.setRequestHeader('width', '35') |
| client.setRequestHeader('viewport-width', '42') |
| client.send(null) |
| |
| const res = JSON.parse(client.response) |
| assert_equals(res['x-print'], 'unicorn') |
| assert_equals(res['content-type'], 'text/plain') |
| assert_equals(res['accept'], 'test') |
| assert_equals(res['accept-language'], 'nn') |
| assert_equals(res['content-language'], 'nn') |
| assert_equals(res['save-data'], 'on') |
| assert_equals(res['device-memory'], '1.0') |
| assert_equals(res['dpr'], '2.0') |
| assert_equals(res['width'], '35') |
| assert_equals(res['viewport-width'], '42') |
| }, 'Client hint headers are simple headers') |
| |
| test(function() { |
| var client = new XMLHttpRequest() |
| client.open('GET', CROSSDOMAIN + 'resources/cors-makeheader.py?headers=x-print', false) |
| client.setRequestHeader('x-print', 'unicorn') |
| client.setRequestHeader('y-print', 'unicorn') |
| assert_throws("NetworkError", function() { client.send(null) }) |
| }, 'Unspecified request headers are disallowed') |
| |
| test(function() { |
| var client = new XMLHttpRequest() |
| client.open('GET', CROSSDOMAIN + 'resources/cors-makeheader.py?headers=x-print', false) |
| client.setRequestHeader('device-memory', '') |
| assert_throws("NetworkError", function() { client.send(null) }) |
| }, 'Unextractable device-memory client hint header is disallowed') |
| |
| test(function() { |
| var client = new XMLHttpRequest() |
| client.open('GET', CROSSDOMAIN + 'resources/cors-makeheader.py?headers=x-print', false) |
| client.setRequestHeader('dpr', '') |
| assert_throws("NetworkError", function() { client.send(null) }) |
| }, 'Unextractable DPR client hint header is disallowed') |
| |
| test(function() { |
| var client = new XMLHttpRequest() |
| client.open('GET', CROSSDOMAIN + 'resources/cors-makeheader.py?headers=x-print', false) |
| client.setRequestHeader('width', '') |
| assert_throws("NetworkError", function() { client.send(null) }) |
| }, 'Unextractable width client hint header is disallowed') |
| |
| test(function() { |
| var client = new XMLHttpRequest() |
| client.open('GET', CROSSDOMAIN + 'resources/cors-makeheader.py?headers=x-print', false) |
| client.setRequestHeader('viewport-width', '') |
| assert_throws("NetworkError", function() { client.send(null) }) |
| }, 'Unextractable viewport-width client hint header is disallowed') |
| |
| </script> |
