file_framing_error_pages.sjs (674B)
1 "use strict"; 2 3 function handleRequest(request, response) { 4 response.setHeader("Cache-Control", "no-cache", false); 5 response.setHeader("Content-Type", "text/html", false); 6 7 let query = request.queryString; 8 if (query === "xfo") { 9 response.setHeader("x-frame-options", "deny", false); 10 response.write("<html>xfo test loaded</html>"); 11 return; 12 } 13 14 if (query === "csp") { 15 response.setHeader( 16 "content-security-policy", 17 "frame-ancestors 'none'", 18 false 19 ); 20 response.write("<html>csp test loaded</html>"); 21 return; 22 } 23 24 // we should never get here, but just in case 25 // return something unexpected 26 response.write("do'h"); 27 }