| <!DOCTYPE html> |
| <html> |
| <head> |
| <script src="/js-test-resources/js-test.js"></script> |
| <script> |
| description("Tests that a cross-origin fetch in an iframe load fails if the server blocks cross-origin loads with a 'From-Origin: same' response header."); |
| jsTestIsAsync = true; |
| testRunner.dumpChildFramesAsText(); |
| |
| function addIframe (url) { |
| iframeElement = document.createElement("iframe"); |
| iframeElement.src = url; |
| document.body.appendChild(iframeElement); |
| } |
| |
| var ipAddressIframeDone = false; |
| var localhostIframeDone = false; |
| function receiveMessage(event) { |
| if (event.origin === "http://127.0.0.1:8000") { |
| ipAddressIframeDone = true; |
| if (event.data.indexOf("fetchSuccess") !== -1) |
| testFailed("Localhost fetch in 127.0.0.1 iframe succeeded."); |
| else if (event.data.indexOf("fetchError") === -1) |
| testFailed("Received an unrecognized message. " + event.data); |
| addIframe("http://localhost:8000/from-origin/resources/iframeIPAddressFetch.html"); |
| } else if (event.origin === "http://localhost:8000") { |
| localhostIframeDone = true; |
| if (event.data.indexOf("fetchSuccess") !== -1) |
| testFailed("127.0.0.1 fetch in localhost iframe succeeded."); |
| else if (event.data.indexOf("fetchError") === -1) |
| testFailed("Received an unrecognized message. " + event.data); |
| } else { |
| testFailed("Received a message from an unexpected origin: " + event.origin); |
| finishJSTest(); |
| } |
| |
| if (ipAddressIframeDone && localhostIframeDone) { |
| testPassed("Localhost fetch in 127.0.0.1 iframe blocked and 127.0.0.1 fetch in localhost iframe blocked."); |
| finishJSTest(); |
| } |
| } |
| |
| window.addEventListener("message", receiveMessage, false); |
| |
| function run() { |
| addIframe("http://127.0.0.1:8000/from-origin/resources/iframeLocalhostFetch.html"); |
| } |
| </script> |
| </head> |
| <body onload="run()"> |
| </body> |
| </html> |
