tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

csp-fail.https.window.js (1161B)


      1 // META: global=window,worker
      2 // META: script=/common/get-host-info.sub.js
      3 // META: script=resources/webtransport-test-helpers.sub.js
      4 
      5 function set_csp(destination) {
      6  let meta = document.createElement('meta');
      7  meta.httpEquiv = 'Content-Security-Policy';
      8  meta.content = `connect-src ${destination}`;
      9  return meta;
     10 }
     11 
     12 promise_test(async t => {
     13  let meta = set_csp("'none'");
     14  document.head.appendChild(meta);
     15 
     16  let wt = new WebTransport(webtransport_url('custom-response.py?:status=200'));
     17 
     18  // Sadly we cannot use promise_rejects_dom as the error constructor is
     19  // WebTransportError rather than DOMException.
     20  const e = await wt.ready.catch(e => e);
     21  await promise_rejects_exactly(t, e, wt.ready, 'ready promise should be rejected');
     22  await promise_rejects_exactly(t, e, wt.closed, 'closed promise should be rejected');
     23  assert_equals(e.name, 'WebTransportError', 'WebTransportError');
     24  assert_true(e instanceof WebTransportError);
     25  assert_equals(e.source, 'session', 'source');
     26  assert_equals(e.streamErrorCode, null, 'streamErrorCode');
     27 }, 'WebTransport connection should fail when CSP connect-src is set to none and reject the promises');