dom/browser-element/mochitest/file_browserElement_XFrameOptionsAllowFrom.sjs@ac0c01689b40
dom/browser-element/mochitest/file_browserElement_XFrameOptionsAllowFrom.sjs
Thu, 15 Jan 2015 15:59:08 +0100
- author
- Michael Schloh von Bennewitz <michael@schloh.com>
- date
- Thu, 15 Jan 2015 15:59:08 +0100
- branch
- TOR_BUG_9701
- changeset 10
- ac0c01689b40
- permissions
- -rw-r--r--
Implement a real Private Browsing Mode condition by changing the API/ABI;
This solves Tor bug #9701, complying with disk avoidance documented in
https://www.torproject.org/projects/torbrowser/design/#disk-avoidance.
1 function handleRequest(request, response)
2 {
3 var content = 'step 1';
4 if (request.queryString == "iframe1") {
5 response.setHeader("X-Frame-Options", "Allow-From http://mochi.test:8888/")
6 content = 'finish';
7 } else {
8 response.setHeader("X-Frame-Options", "Allow-From http://example.com")
9 }
11 response.setHeader("Content-Type", "text/html", false);
13 // Tests rely on this page not being entirely blank, because they take
14 // screenshots to determine whether this page was loaded.
15 response.write("<html><body>XFrameOptions test<script>alert('" + content + "')</script></body></html>");
16 }
