Content - 20b875b9bddc3c15520eb2e462a4011334fba332 - 3dbf981/xhr/access-control-basic-cors-safelisted-request-headers.htm

visit type:

Tip revision: ae999f1c2fe70a3195d00d214002242227b63b62 authored by Luke Bjerring on 16 May 2018, 02:06:44 UTC
Fix nits as per review

Tip revision: ae999f1

access-control-basic-cors-safelisted-request-headers.htm

<!DOCTYPE html>
<html>
  <head>
    <title>Tests that CORS-safelisted request headers are permitted in cross-origin request</title>
    <script src="/resources/testharness.js"></script>
    <script src="/resources/testharnessreport.js"></script>
    <script src="/common/get-host-info.sub.js"></script>
  </head>
  <body>
    <script type="text/javascript">
    test(function() {
      const xhr = new XMLHttpRequest;

      xhr.open("POST", get_host_info().HTTP_REMOTE_ORIGIN + "/xhr/resources/access-control-basic-cors-safelisted-request-headers.py", false);

      xhr.setRequestHeader("Accept", "*");
      xhr.setRequestHeader("Accept-Language", "ru");
      xhr.setRequestHeader("Content-Language", "ru");
      xhr.setRequestHeader("Content-Type", "text/plain");
      xhr.setRequestHeader("Save-Data", "on");

      xhr.send();

      assert_equals(xhr.responseText,
          "Accept: *\n" +
          "Accept-Language: ru\n" +
          "Content-Language: ru\n" +
          "Content-Type: text/plain\n");
    }, "Request with CORS-safelisted headers");
    </script>
  </body>
</html>

Browse the archive

https://github.com/web-platform-tests/wpt