tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

shared-storage-writable-setters.tentative.https.sub.html (2124B)


      1 <!doctype html>
      2 <body>
      3  <script src=/resources/testharness.js></script>
      4  <script src=/resources/testharnessreport.js></script>
      5  <script src=/common/utils.js></script>
      6  <script src=/common/get-host-info.sub.js></script>
      7  <script src=/fenced-frame/resources/utils.js></script>
      8  <script src=/shared-storage/resources/util.js></script>
      9  <script>
     10    'use strict';
     11 
     12    const rawSetterHeader = 'set;key=hello;value=world;ignore_if_present,'
     13      + 'append;value=friend;key=hello';
     14    const setterHeader = encodeURIComponent(rawSetterHeader);
     15    const sameOriginSetterUrl =
     16      `/shared-storage/resources/shared-storage-write.py?write=${setterHeader}`;
     17    const sameOrigin = generateURL(sameOriginSetterUrl, []).origin;
     18    const crossOrigin = 'https://{{domains[www]}}:{{ports[https][0]}}';
     19    const crossOriginSetterUrl = crossOrigin + sameOriginSetterUrl;
     20 
     21    promise_test(async t => {
     22      let response = await fetch(sameOriginSetterUrl,
     23                                 {sharedStorageWritable: true});
     24      let sharedStorageWritableHeader = await response.text();
     25      assert_equals(sharedStorageWritableHeader, "?1");
     26 
     27      // JS does not see the `Shared-Storage-Write` response header.
     28      assert_false(!!response.headers.get('Shared-Storage-Write'));
     29 
     30      await verifyKeyValueForOrigin('hello', 'worldfriend', sameOrigin);
     31    }, 'Writing to shared storage via the \'Shared-Storage-Write\' header '
     32       + 'for a same-origin shared storage fetch request');
     33 
     34    promise_test(async t => {
     35      let response = await fetch(crossOriginSetterUrl,
     36                                 {sharedStorageWritable: true});
     37      let sharedStorageWritableHeader = await response.text();
     38      assert_equals(sharedStorageWritableHeader, "?1");
     39 
     40      // JS does not see the `Shared-Storage-Write` response header.
     41      assert_false(!!response.headers.get('Shared-Storage-Write'));
     42 
     43      await verifyKeyValueForOrigin('hello', 'worldfriend', crossOrigin);
     44    }, 'Writing to shared storage via the \'Shared-Storage-Write\' header '
     45       + 'for a cross-origin shared storage fetch request');
     46  </script>
     47 </body>