| <!DOCTYPE html> |
| <!-- DO NOT EDIT! Generated by referrer-policy/generic/tools/generate.py using referrer-policy/generic/template/test.release.html.template. --> |
| <html> |
| <head> |
| <title>Referrer-Policy: Referrer Policy is set to 'strict-origin-when-cross-origin'</title> |
| <meta name="description" content="Check that a priori insecure subresource gets no referrer information. Otherwise, cross-origin subresources get the origin portion of the referrer URL and same-origin get the stripped referrer URL."> |
| <!-- No meta: Referrer policy delivered via HTTP headers. --> |
| <link rel="author" title="Kristijan Burnik" href="burnik@chromium.org"> |
| <link rel="help" href="https://w3c.github.io/webappsec-referrer-policy/#referrer-policy-strict-origin-when-cross-origin"> |
| <meta name="assert" content="The referrer URL is origin when a |
| document served over http requires an http |
| sub-resource via fetch-request using the http-rp |
| delivery method with swap-origin-redirect and when |
| the target request is cross-origin."> |
| <script src="/resources/testharness.js"></script> |
| <script src="/resources/testharnessreport.js"></script> |
| <script src="/common/security-features/resources/common.js"></script> |
| <script src="/referrer-policy/generic/referrer-policy-test-case.js?pipe=sub"></script> |
| </head> |
| <body> |
| <script> |
| ReferrerPolicyTestCase( |
| { |
| "referrer_policy": "strict-origin-when-cross-origin", |
| "delivery_method": "http-rp", |
| "redirection": "swap-origin-redirect", |
| "origin": "cross-origin", |
| "source_protocol": "http", |
| "target_protocol": "http", |
| "subresource": "fetch-request", |
| "referrer_url": "origin" |
| }, |
| document.querySelector("meta[name=assert]").content, |
| new SanityChecker() |
| ).start(); |
| </script> |
| <div id="log"></div> |
| </body> |
| </html> |
