tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

file_framing_error_pages.sjs (674B)


      1 "use strict";
      2 
      3 function handleRequest(request, response) {
      4   response.setHeader("Cache-Control", "no-cache", false);
      5   response.setHeader("Content-Type", "text/html", false);
      6 
      7   let query = request.queryString;
      8   if (query === "xfo") {
      9     response.setHeader("x-frame-options", "deny", false);
     10     response.write("<html>xfo test loaded</html>");
     11     return;
     12   }
     13 
     14   if (query === "csp") {
     15     response.setHeader(
     16       "content-security-policy",
     17       "frame-ancestors 'none'",
     18       false
     19     );
     20     response.write("<html>csp test loaded</html>");
     21     return;
     22   }
     23 
     24   // we should never get here, but just in case
     25   // return something unexpected
     26   response.write("do'h");
     27 }