tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

fetch.https.html (2479B)


      1 <!DOCTYPE html>
      2 <!-- DO NOT EDIT! Generated by `common/security-features/tools/generate.py --spec mixed-content/` -->
      3 <html>
      4  <head>
      5    <meta charset="utf-8">
      6    <meta name="timeout" content="long">
      7    <meta http-equiv="Content-Security-Policy" content="block-all-mixed-content">
      8    <script src="/resources/testharness.js"></script>
      9    <script src="/resources/testharnessreport.js"></script>
     10    <script src="/common/security-features/resources/common.sub.js"></script>
     11    <script src="../../../generic/test-case.sub.js"></script>
     12  </head>
     13  <body>
     14    <script>
     15      TestCase(
     16        [
     17          {
     18            "expectation": "allowed",
     19            "origin": "same-https",
     20            "redirection": "no-redirect",
     21            "source_context_list": [
     22              {
     23                "policyDeliveries": [],
     24                "sourceContextType": "worker-classic-data"
     25              }
     26            ],
     27            "source_scheme": "https",
     28            "subresource": "fetch",
     29            "subresource_policy_deliveries": [],
     30            "test_description": "Mixed-Content: Expects allowed for fetch to same-https origin and no-redirect redirection from https context."
     31          },
     32          {
     33            "expectation": "blocked",
     34            "origin": "cross-http",
     35            "redirection": "no-redirect",
     36            "source_context_list": [
     37              {
     38                "policyDeliveries": [],
     39                "sourceContextType": "worker-classic-data"
     40              }
     41            ],
     42            "source_scheme": "https",
     43            "subresource": "fetch",
     44            "subresource_policy_deliveries": [],
     45            "test_description": "Mixed-Content: Expects blocked for fetch to cross-http origin and no-redirect redirection from https context."
     46          },
     47          {
     48            "expectation": "blocked",
     49            "origin": "same-http",
     50            "redirection": "no-redirect",
     51            "source_context_list": [
     52              {
     53                "policyDeliveries": [],
     54                "sourceContextType": "worker-classic-data"
     55              }
     56            ],
     57            "source_scheme": "https",
     58            "subresource": "fetch",
     59            "subresource_policy_deliveries": [],
     60            "test_description": "Mixed-Content: Expects blocked for fetch to same-http origin and no-redirect redirection from https context."
     61          }
     62        ],
     63        new SanityChecker()
     64      ).start();
     65    </script>
     66    <div id="log"></div>
     67  </body>
     68 </html>