| <!DOCTYPE html> |
| <html> |
| <head> |
| <script src="/resources/testharness.js"></script> |
| <script src="/resources/testharnessreport.js"></script> |
| </head> |
| </head> |
| <body> |
| <p> |
| This test ensures that XHR/Fetch will bypass CORS for user extension URLS in case the page is running user scripts. |
| </p> |
| <script> |
| if (!window.internals) |
| alert("This test requires WebKit internals API to work properly"); |
| |
| test(() => { |
| xhr = new XMLHttpRequest(); |
| xhr.open("GET", "safari-extension://test1", false); |
| assert_throws_dom("NetworkError", () => { xhr.send() }); |
| }, "Bypassing CORS on synchronous XHR - should trigger a CORS error message"); |
| |
| test(() => { |
| internals.setAsRunningUserScripts(); |
| |
| xhr = new XMLHttpRequest(); |
| xhr.open("GET", "safari-extension://test3", false); |
| assert_throws_dom("NetworkError", () => { xhr.send() }); |
| }, "Bypassing CORS on synchronous XHR - should not trigger a CORS error message"); |
| |
| promise_test((test) => { |
| return promise_rejects_js(test, TypeError, fetch("safari-extension://test4")); |
| }, "Bypassing CORS on asynchronous fetch - should not trigger a CORS error message"); |
| </script> |
| </body> |
| </html> |
