|
1 function handleRequest(request, response) |
|
2 { |
|
3 var content = 'step 1'; |
|
4 if (request.queryString == "iframe1") { |
|
5 response.setHeader("X-Frame-Options", "Allow-From http://mochi.test:8888/") |
|
6 content = 'finish'; |
|
7 } else { |
|
8 response.setHeader("X-Frame-Options", "Allow-From http://example.com") |
|
9 } |
|
10 |
|
11 response.setHeader("Content-Type", "text/html", false); |
|
12 |
|
13 // Tests rely on this page not being entirely blank, because they take |
|
14 // screenshots to determine whether this page was loaded. |
|
15 response.write("<html><body>XFrameOptions test<script>alert('" + content + "')</script></body></html>"); |
|
16 } |