| <!DOCTYPE html> |
| <!-- DO NOT EDIT! Generated by referrer-policy/generic/tools/generate.py using common/security-features/tools/template/test.release.html.template. --> |
| <html> |
| <head> |
| <title>Referrer-Policy: Referrer Policy is set to 'origin-when-cross-origin'</title> |
| <meta charset='utf-8'> |
| <meta name="timeout" content="long"> |
| <meta name="description" content="Check that cross-origin subresources get the origin portion of the referrer URL and same-origin get the stripped referrer URL."> |
| <link rel="author" title="Kristijan Burnik" href="burnik@chromium.org"> |
| <link rel="help" href="https://w3c.github.io/webappsec-referrer-policy/#referrer-policy-origin-when-cross-origin"> |
| <meta name="referrer" content="no-referrer"> |
| <script src="/resources/testharness.js"></script> |
| <script src="/resources/testharnessreport.js"></script> |
| <script src="/common/security-features/resources/common.sub.js"></script> |
| <script src="/referrer-policy/generic/test-case_2.sub.js"></script> |
| </head> |
| <body> |
| <script> |
| TestCase( |
| [ |
| { |
| "expectation": "stripped-referrer", |
| "origin": "same-http", |
| "redirection": "no-redirect", |
| "source_context_list": [], |
| "source_scheme": "http", |
| "subresource": "a-tag", |
| "subresource_policy_deliveries": [ |
| { |
| "deliveryType": "attr", |
| "key": "referrerPolicy", |
| "value": "origin-when-cross-origin" |
| } |
| ], |
| "test_description": "Referrer Policy: Expects stripped-referrer for a-tag to same-http origin and no-redirect redirection from http context." |
| }, |
| { |
| "expectation": "origin", |
| "origin": "cross-http", |
| "redirection": "no-redirect", |
| "source_context_list": [], |
| "source_scheme": "http", |
| "subresource": "a-tag", |
| "subresource_policy_deliveries": [ |
| { |
| "deliveryType": "attr", |
| "key": "referrerPolicy", |
| "value": "origin-when-cross-origin" |
| } |
| ], |
| "test_description": "Referrer Policy: Expects origin for a-tag to cross-http origin and no-redirect redirection from http context." |
| }, |
| { |
| "expectation": "origin", |
| "origin": "cross-https", |
| "redirection": "no-redirect", |
| "source_context_list": [], |
| "source_scheme": "http", |
| "subresource": "a-tag", |
| "subresource_policy_deliveries": [ |
| { |
| "deliveryType": "attr", |
| "key": "referrerPolicy", |
| "value": "origin-when-cross-origin" |
| } |
| ], |
| "test_description": "Referrer Policy: Expects origin for a-tag to cross-https origin and no-redirect redirection from http context." |
| }, |
| { |
| "expectation": "origin", |
| "origin": "same-https", |
| "redirection": "no-redirect", |
| "source_context_list": [], |
| "source_scheme": "http", |
| "subresource": "a-tag", |
| "subresource_policy_deliveries": [ |
| { |
| "deliveryType": "attr", |
| "key": "referrerPolicy", |
| "value": "origin-when-cross-origin" |
| } |
| ], |
| "test_description": "Referrer Policy: Expects origin for a-tag to same-https origin and no-redirect redirection from http context." |
| } |
| ], |
| new SanityChecker() |
| ).start(); |
| </script> |
| <div id="log"></div> |
| </body> |
| </html> |
