file_bug_1725646_a.sjs (680B)
1 "use strict"; 2 /* eslint-disable @microsoft/sdl/no-insecure-url */ 3 4 const URL_B = 5 "http://example.com/tests/dom/security/test/https-first/file_bug_1725646_b.sjs"; 6 7 const RESPONSE = ` 8 <!DOCTYPE html> 9 <html> 10 <body> 11 <h1>Welcome to our insecure site!</h1> 12 <script type="application/javascript"> 13 window.opener.postMessage({location: location.href}, '*'); 14 </script> 15 </body> 16 </html>`; 17 18 function handleRequest(request, response) { 19 response.setHeader("Cache-Control", "no-cache", false); 20 21 if (request.scheme === "http") { 22 response.write(RESPONSE); 23 } else { 24 response.setStatusLine(request.httpVersion, 302, "Found"); 25 response.setHeader("Location", URL_B, false); 26 } 27 }