| <!DOCTYPE html> |
| <!-- DO NOT EDIT! Generated by `common/security-features/tools/generate.py --spec upgrade-insecure-requests/` --> |
| <html> |
| <head> |
| <meta charset="utf-8"> |
| <meta name="timeout" content="long"> |
| <meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests"> |
| <script src="/resources/testharness.js"></script> |
| <script src="/resources/testharnessreport.js"></script> |
| <script src="/common/security-features/resources/common.sub.js"></script> |
| <script src="../../../generic/test-case.sub.js"></script> |
| </head> |
| <body> |
| <script> |
| TestCase( |
| [ |
| { |
| "expectation": "allowed", |
| "origin": "same-http-downgrade", |
| "redirection": "downgrade", |
| "source_context_list": [ |
| { |
| "policyDeliveries": [], |
| "sourceContextType": "iframe-blank" |
| } |
| ], |
| "source_scheme": "https", |
| "subresource": "worker-classic", |
| "subresource_policy_deliveries": [], |
| "test_description": "Upgrade-Insecure-Requests: Expects allowed for worker-classic to same-http-downgrade origin and downgrade redirection from https context." |
| }, |
| { |
| "expectation": "allowed", |
| "origin": "same-http-downgrade", |
| "redirection": "no-redirect", |
| "source_context_list": [ |
| { |
| "policyDeliveries": [], |
| "sourceContextType": "iframe-blank" |
| } |
| ], |
| "source_scheme": "https", |
| "subresource": "worker-classic", |
| "subresource_policy_deliveries": [], |
| "test_description": "Upgrade-Insecure-Requests: Expects allowed for worker-classic to same-http-downgrade origin and no-redirect redirection from https context." |
| }, |
| { |
| "expectation": "allowed", |
| "origin": "same-https", |
| "redirection": "downgrade", |
| "source_context_list": [ |
| { |
| "policyDeliveries": [], |
| "sourceContextType": "iframe-blank" |
| } |
| ], |
| "source_scheme": "https", |
| "subresource": "worker-classic", |
| "subresource_policy_deliveries": [], |
| "test_description": "Upgrade-Insecure-Requests: Expects allowed for worker-classic to same-https origin and downgrade redirection from https context." |
| } |
| ], |
| new SanityChecker() |
| ).start(); |
| </script> |
| <div id="log"></div> |
| </body> |
| </html> |
