<script>
var request = new XMLHttpRequest();
request.onreadystatechange = function () {
    if (this.readyState === 4){
        alert("Verifying credentials are used after navigating within the same domain: " + this.responseText);

        // Open the rest of the test in a different domain and verify that the credentials are not used.
        window.open('http://localhost:8000/security/resources/credentials-from-different-domains-continued-2.html');
    }
};
request.open('GET', 'http://127.0.0.1:8000/security/resources/cors-basic-auth.php', true);
request.send();
</script>