| Start |
| Trying different ways to access a password protected resource from another origin. The UA already has login and password for this protection space. |
| |
| You should see several PASS messages followed by a DONE |
| |
| SCRIPT SRC='...' Should succeed, since authorization is sent for cross-origin subresource loads. |
| PASS: Loaded, user test |
| Cross-origin XMLHttpRequest (sync), testing stored authorization. |
| PASS |
| Cross-origin XMLHttpRequest (sync), testing cookies. |
| PASS |
| Cross-origin XMLHttpRequest (async), testing stored authorization. |
| PASS |
| Cross-origin XMLHttpRequest (async), testing cookies. |
| PASS |
| Cross-origin XMLHttpRequest (sync), testing authorization with explicitly provided credentials that should be ignored. |
| PASS |
| Cross-origin XMLHttpRequest (async), testing authorization with explicitly provided credentials that should be ignored. |
| PASS |
| DONE |
| |
