| <!DOCTYPE html> |
| |
| <link rel="author" href="mtrzos@google.com" title="Maciek Trzos"> |
| <script src=/resources/testharness.js></script> |
| <script src=/resources/testharnessreport.js></script> |
| <script src=/fetch/sec-metadata/resources/helper.js></script> |
| <script src=/common/utils.js></script> |
| <script> |
| // Open a window with XML document which loads resources via <?xml-stylesheet/> tag |
| let nonce = token(); |
| let w = window.open("resources/xslt-test.sub.xml?token=" + nonce); |
| window.addEventListener('message', function(e) { |
| if (e.source != w) |
| return; |
| |
| promise_test(t => { |
| let expected = {"dest":"xslt", "site":"same-origin", "user":"", "mode": "same-origin"}; |
| return fetch("/fetch/sec-metadata/resources/record-header.py?retrieve=true&file=xslt-same-origin" + nonce) |
| .then(response => response.text()) |
| .then(text => assert_header_equals(text, expected)); |
| }, "Same-Origin xslt"); |
| |
| promise_test(t => { |
| let expected = {"dest":"xslt", "site":"same-site", "user":"", "mode": "no-cors"}; |
| return fetch("/fetch/sec-metadata/resources/record-header.py?retrieve=true&file=xslt-same-site" + nonce) |
| .then(response => response.text()) |
| .then(text => assert_header_equals(text, expected)); |
| }, "Same-site xslt"); |
| |
| promise_test(t => { |
| let expected = {"dest":"xslt", "site":"cross-site", "user":"", "mode": "no-cors"}; |
| return fetch("/fetch/sec-metadata/resources/record-header.py?retrieve=true&file=xslt-cross-site" + nonce) |
| .then(response => response.text()) |
| .then(text => assert_header_equals(text, expected)); |
| }, "Cross-site xslt"); |
| |
| w.close(); |
| }); |
| |
| </script> |