deny.html (873B)
1 <!DOCTYPE html> 2 <meta charset="utf-8"> 3 <title>X-Frame-Options variations of DENY</title> 4 <script src="/resources/testharness.js"></script> 5 <script src="/resources/testharnessreport.js"></script> 6 <script src="./support/helper.sub.js"></script> 7 8 <body> 9 <script> 10 "use strict"; 11 12 xfo_simple_tests({ 13 headerValue: `DENY`, 14 sameOriginAllowed: false, 15 crossOriginAllowed: false 16 }); 17 18 xfo_simple_tests({ 19 headerValue: `denY`, 20 sameOriginAllowed: false, 21 crossOriginAllowed: false 22 }); 23 24 xfo_simple_tests({ 25 headerValue: ` DENY `, 26 sameOriginAllowed: false, 27 crossOriginAllowed: false 28 }); 29 30 xfo_simple_tests({ 31 headerValue: `DENY`, 32 cspValue: `default-src 'self'`, 33 sameOriginAllowed: false, 34 crossOriginAllowed: false 35 }); 36 37 xfo_simple_tests({ 38 headerValue: `DENY`, 39 cspValue: `frame-ancestors 'self'`, 40 sameOriginAllowed: true, 41 crossOriginAllowed: false 42 }); 43 </script>