| <!DOCTYPE html> |
| <title>COEP for WebBundle subresource loading</title> |
| <link rel="help" href="https://github.com/WICG/webpackage/blob/main/explainers/subresource-loading.md" /> |
| <link rel="help" href="https://html.spec.whatwg.org/multipage/origin.html#coep" /> |
| <script src="/resources/testharness.js"></script> |
| <script src="/resources/testharnessreport.js"></script> |
| <script src="../resources/test-helpers.js"></script> |
| |
| <body> |
| <!-- |
| This wpt should run on an origin different from https://www1.web-platform.test:8444/, |
| from where cross-orign WebBundles are served. |
| |
| This test uses a cross-origin WebBundle, |
| https://www1.web-platform.test:8444/web-bundle/resources/wbn/cors/corp.wbn, |
| which is served with an Access-Control-Allow-Origin response header. |
| |
| `corp.wbn` includes three subresources: |
| a. `no-corp.js`, which doesn't include a Cross-Origin-Resource-Policy response header. |
| b. `corp-same-origin.js`, which includes a Cross-Origin-Resource-Policy: same-origin response header. |
| c. `corp-cross-origin.js`, which includes a Cross-Origin-Resource-Policy: cross-origin response header. |
| --> |
| <link |
| rel="webbundle" |
| href="https://www1.web-platform.test:8444/web-bundle/resources/wbn/cors/corp.wbn" |
| resources="https://www1.web-platform.test:8444/web-bundle/resources/wbn/cors/no-corp.js |
| https://www1.web-platform.test:8444/web-bundle/resources/wbn/cors/corp-same-origin.js |
| https://www1.web-platform.test:8444/web-bundle/resources/wbn/cors/corp-cross-origin.js |
| urn:uuid:5eafff38-e0a0-4661-bde0-434255aa9d93 |
| urn:uuid:7e13b47a-8b91-4a0e-997c-993a5e2f3a34 |
| urn:uuid:86d5b696-8867-4454-8b07-51239a0817f7" |
| /> |
| <script src="resources/coep-test.js"></script> |
| </body> |
