setrequestheader-header-allowed.htm (1168B)
1 <!doctype html> 2 <html> 3 <head> 4 <title>XMLHttpRequest: setRequestHeader() - headers that are allowed</title> 5 <script src="/resources/testharness.js"></script> 6 <script src="/resources/testharnessreport.js"></script> 7 <link rel="help" href="https://xhr.spec.whatwg.org/#the-setrequestheader()-method"> 8 </head> 9 <body> 10 <div id="log"></div> 11 <script> 12 function request(header) { 13 test(function() { 14 var client = new XMLHttpRequest() 15 client.open("POST", "resources/inspect-headers.py?filter_value=t1, t2", false) 16 client.setRequestHeader(header, "t1") 17 client.setRequestHeader(header, "t2") 18 client.send(null) 19 assert_equals(client.responseText, header + ",") 20 }, document.title + " (" + header + ")") 21 } 22 request("Authorization") 23 request("Pragma") 24 request("User-Agent") 25 request("Content-Transfer-Encoding") 26 request("Content-Type") 27 request("Overwrite") 28 request("If") 29 request("Status-URI") 30 request("X-Pink-Unicorn") 31 request("!#$%&'*+-.^_`|~0123456789abcdefghijklmnopqrstuvwxyz") 32 </script> 33 </body> 34 </html>