| <!DOCTYPE html> |
| <script src=/resources/testharness.js></script> |
| <script src=/resources/testharnessreport.js></script> |
| <script src=/fetch/sec-metadata/resources/helper.js></script> |
| <script> |
| // Site |
| promise_test(t => { |
| return fetch("https://{{host}}:{{ports[https][0]}}/fetch/sec-metadata/resources/echo-as-json.py") |
| .then(r => r.json()) |
| .then(j => { |
| assert_header_equals(j, { |
| "dest": "empty", |
| "site": "same-origin", |
| "user": "?F", |
| "mode": "cors", |
| }); |
| }); |
| }, "Same-origin fetch"); |
| |
| promise_test(t => { |
| return fetch("https://{{hosts[][www]}}:{{ports[https][0]}}/fetch/sec-metadata/resources/echo-as-json.py") |
| .then(r => r.json()) |
| .then(j => { |
| assert_header_equals(j, { |
| "dest": "empty", |
| "site": "same-site", |
| "user": "?F", |
| "mode": "cors", |
| }); |
| }); |
| }, "Same-site fetch"); |
| |
| promise_test(t => { |
| return fetch("https://{{hosts[alt][www]}}:{{ports[https][0]}}/fetch/sec-metadata/resources/echo-as-json.py") |
| .then(r => r.json()) |
| .then(j => { |
| assert_header_equals(j, { |
| "dest": "empty", |
| "site": "cross-site", |
| "user": "?F", |
| "mode": "cors", |
| }); |
| }); |
| }, "Cross-site fetch"); |
| |
| // Mode |
| promise_test(t => { |
| return fetch("https://{{host}}:{{ports[https][0]}}/fetch/sec-metadata/resources/echo-as-json.py", {mode: "same-origin"}) |
| .then(r => r.json()) |
| .then(j => { |
| assert_header_equals(j, { |
| "dest": "empty", |
| "site": "same-origin", |
| "user": "?F", |
| "mode": "same-origin", |
| }); |
| }); |
| }, "Same-origin mode"); |
| |
| promise_test(t => { |
| return fetch("https://{{host}}:{{ports[https][0]}}/fetch/sec-metadata/resources/echo-as-json.py", {mode: "cors"}) |
| .then(r => r.json()) |
| .then(j => { |
| assert_header_equals(j, { |
| "dest": "empty", |
| "site": "same-origin", |
| "user": "?F", |
| "mode": "cors", |
| }); |
| }); |
| }, "CORS mode"); |
| |
| promise_test(t => { |
| return fetch("https://{{host}}:{{ports[https][0]}}/fetch/sec-metadata/resources/echo-as-json.py", {mode: "no-cors"}) |
| .then(r => r.json()) |
| .then(j => { |
| assert_header_equals(j, { |
| "dest": "empty", |
| "site": "same-origin", |
| "user": "?F", |
| "mode": "no-cors", |
| }); |
| }); |
| }, "no-CORS mode"); |
| </script> |
