michael@0: function handleRequest(request, response) michael@0: { michael@0: var content = 'step 1'; michael@0: if (request.queryString == "iframe1") { michael@0: response.setHeader("X-Frame-Options", "Allow-From http://mochi.test:8888/") michael@0: content = 'finish'; michael@0: } else { michael@0: response.setHeader("X-Frame-Options", "Allow-From http://example.com") michael@0: } michael@0: michael@0: response.setHeader("Content-Type", "text/html", false); michael@0: michael@0: // Tests rely on this page not being entirely blank, because they take michael@0: // screenshots to determine whether this page was loaded. michael@0: response.write("XFrameOptions test"); michael@0: }