<!DOCTYPE html>
<script src=/resources/testharness.js></script>
<script src=/resources/testharnessreport.js></script>
<script src=/fetch/metadata/resources/helper.js></script>

<!-- Same-origin script -->
<script src="http://{{host}}:{{ports[http][0]}}/fetch/metadata/resources/echo-as-script.py"></script>
<script>
  test(t => {
    t.add_cleanup(_ => { header = null; });

    assert_header_equals(header, {
      "site": "",
      "user": "",
      "mode": "",
      "dest": ""
    }, "Non-secure same-origin script => No headers");
  }, "Non-secure same-origin script => No headers");
</script>

<!-- Same-site script -->
<script src="http://{{hosts[][www]}}:{{ports[http][0]}}/fetch/metadata/resources/echo-as-script.py"></script>
<script>
  test(t => {
    t.add_cleanup(_ => { header = null; });

    assert_header_equals(header, {
      "site": "",
      "user": "",
      "mode": "",
      "dest": ""
    }, "Non-secure same-site script => No headers");
  }, "Non-secure same-site script => No headers");
</script>

<!-- Cross-site script -->
<script src="http://{{hosts[alt][www]}}:{{ports[http][0]}}/fetch/metadata/resources/echo-as-script.py"></script>
<script>
  test(t => {
    t.add_cleanup(_ => { header = null; });

    assert_header_equals(header, {
      "site": "",
      "user": "",
      "mode": "",
      "dest": ""
    }, "Non-secure cross-site script => No headers");
  }, "Non-secure cross-site script => No headers");
</script>