| <!DOCTYPE html> |
| <meta charset="utf-8"/> |
| <link rel="author" href="mtrzos@google.com" title="Maciek Trzos"> |
| <script src=/resources/testharness.js></script> |
| <script src=/resources/testharnessreport.js></script> |
| <script src=/fetch/metadata/resources/helper.js></script> |
| <script src=/common/utils.js></script> |
| <body> |
| <script> |
| let nonce = token(); |
| |
| promise_test(t => { |
| return new Promise((resolve, reject) => { |
| let key = "embed-same-origin" + nonce; |
| |
| let e = document.createElement('embed'); |
| e.src = "https://{{host}}:{{ports[https][0]}}/fetch/metadata/resources/record-header.py?file=" + key; |
| e.onload = e => { |
| fetch_record_header_with_catch(key, "embed", assert_header_dest_equals, resolve, reject); |
| }; |
| |
| document.body.appendChild(e); |
| }) |
| }, "Same-Origin embed"); |
| |
| promise_test(t => { |
| return new Promise((resolve, reject) => { |
| let key = "embed-same-site" + nonce; |
| |
| let e = document.createElement('embed'); |
| e.src = "https://{{hosts[][www]}}:{{ports[https][0]}}/fetch/metadata/resources/record-header.py?file=" + key; |
| e.onload = e => { |
| fetch_record_header_with_catch(key, "embed", assert_header_dest_equals, resolve, reject); |
| }; |
| |
| document.body.appendChild(e); |
| }) |
| }, "Same-Site embed"); |
| |
| promise_test(t => { |
| return new Promise((resolve, reject) => { |
| let key = "embed-cross-site" + nonce; |
| |
| let e = document.createElement('embed'); |
| e.src = "https://{{hosts[alt][www]}}:{{ports[https][0]}}/fetch/metadata/resources/record-header.py?file=" + key; |
| e.onload = e => { |
| fetch_record_header_with_catch(key, "embed", assert_header_dest_equals, resolve, reject); |
| }; |
| |
| document.body.appendChild(e); |
| }) |
| }, "Cross-Site embed"); |
| </script> |
