tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

sxg-referrer-policy-header.tentative.https.html (1962B)


      1 <!DOCTYPE html>
      2 <title>Referrer-Policy header in outer SXG response</title>
      3 <script src="/resources/testharness.js"></script>
      4 <script src="/resources/testharnessreport.js"></script>
      5 <script src="/common/get-host-info.sub.js"></script>
      6 <script src="./resources/sxg-util.js"></script>
      7 <body>
      8 <script>
      9 (() => {
     10  const SAME_ORIGIN = get_host_info().HTTPS_ORIGIN;
     11  const SAME_ORIGIN_SXG = 'sxg-referrer-same-origin.sxg';
     12  const TEST_CASES = [
     13    // Referrer-Policy header in outer SXG response.
     14    {
     15      origin: SAME_ORIGIN,
     16      sxg: SAME_ORIGIN_SXG + '?pipe=header(Referrer-Policy,no-referrer)',
     17      referrerPolicy: undefined,
     18      expectedReferrer: ''
     19    },
     20    {
     21      origin: SAME_ORIGIN,
     22      sxg: SAME_ORIGIN_SXG +
     23           '?pipe=header(Referrer-Policy,no-referrer-when-downgrade)',
     24      referrerPolicy: undefined,
     25      expectedReferrer: document.location.href
     26    },
     27    {
     28      origin: SAME_ORIGIN,
     29      sxg: SAME_ORIGIN_SXG + '?pipe=header(Referrer-Policy,origin)',
     30      referrerPolicy: undefined,
     31      expectedReferrer: document.location.origin + '/'
     32    },
     33    {
     34      origin: SAME_ORIGIN,
     35      sxg: SAME_ORIGIN_SXG + '?pipe=header(Referrer-Policy,same-origin)',
     36      referrerPolicy: undefined,
     37      expectedReferrer: document.location.href
     38    },
     39    {
     40      origin: SAME_ORIGIN,
     41      sxg: SAME_ORIGIN_SXG + '?pipe=header(Referrer-Policy,strict-origin)',
     42      referrerPolicy: undefined,
     43      expectedReferrer: document.location.origin + '/'
     44    },
     45    {
     46      origin: SAME_ORIGIN,
     47      sxg: SAME_ORIGIN_SXG +
     48           '?pipe=header(Referrer-Policy,strict-origin-when-cross-origin)',
     49      referrerPolicy: undefined,
     50      expectedReferrer: document.location.href
     51    },
     52    {
     53      origin: SAME_ORIGIN,
     54      sxg: SAME_ORIGIN_SXG + '?pipe=header(Referrer-Policy,unsafe-url)',
     55      referrerPolicy: undefined,
     56      expectedReferrer: document.location.href
     57    },
     58  ];
     59  runReferrerTests(TEST_CASES);
     60 })();
     61 </script>
     62 </body>