| <!DOCTYPE html> |
| <html> |
| <head> |
| <script src="/js-test-resources/js-test.js"></script> |
| <script src="../resources/cookie-utilities.js"></script> |
| <body> |
| <script> |
| window.jsTestIsAsync = true; |
| |
| description("Tests that Same-Site cookies for 127.0.0.1 are not sent with a request initiated from a page with a different origin."); |
| |
| async function runTest() |
| { |
| if (document.location.hostname === "127.0.0.1") { |
| await resetCookies(); |
| await setCookie("strict", "1", {"SameSite": "Strict", "Max-Age": 100, "path": "/"}); |
| await setCookie("implicit-strict", "1", {"SameSite": null, "Max-Age": 100, "path": "/"}); |
| await setCookie("strict-because-invalid-SameSite-value", "1", {"SameSite": "invalid", "Max-Age": 100, "path": "/"}); |
| await setCookie("lax", "1", {"SameSite": "Lax", "Max-Age": 100, "path": "/"}); |
| window.location.hostname = "localhost"; |
| } else { |
| // localhost |
| setBaseURLWhenFetchingCookies("http://127.0.0.1:8000"); |
| |
| debug("Cookies sent with HTTP request:"); |
| await shouldNotHaveCookie("strict"); |
| await shouldNotHaveCookie("implicit-strict"); |
| await shouldNotHaveCookie("strict-because-invalid-SameSite-value"); |
| await shouldNotHaveCookie("lax"); |
| |
| debug("<br>Cookies visible in DOM:"); |
| shouldNotHaveDOMCookie("strict"); |
| shouldNotHaveDOMCookie("implicit-strict"); |
| shouldNotHaveDOMCookie("strict-because-invalid-SameSite-value"); |
| shouldNotHaveDOMCookie("lax"); |
| |
| await resetCookies(); |
| finishJSTest(); |
| } |
| } |
| |
| runTest(); |
| </script> |
| </body> |
| </html> |
