__secure.header.html | Explore in Territory

<!DOCTYPE html>
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
<script src="/cookies/resources/cookie-helper.sub.js"></script>
<script>
  ["", "domain="+document.location.hostname, "MaxAge=10", "HttpOnly"].forEach(extraParams => {
    // Without 'secure'
    set_prefixed_cookie_via_http_test({
      prefix: "__Secure-",
      params: "Path=/;" + extraParams,
      origin: self.origin,
      shouldExistViaHTTP: false,
      title: "__Secure: Non-secure origin: Should not set 'Path=/;" + extraParams + "'"
    });

    set_prefixed_cookie_via_http_test({
      prefix: "__SeCuRe-",
      params: "Path=/;" + extraParams,
      origin: self.origin,
      shouldExistViaHTTP: false,
      title: "__SeCuRe: Non-secure origin: Should not set 'Path=/;" + extraParams + "'"
    });

    // With 'secure'
    set_prefixed_cookie_via_http_test({
      prefix: "__Secure-",
      params: "Secure; Path=/;" + extraParams,
      origin: self.origin,
      shouldExistViaHTTP: false,
      title: "__Secure: Non-secure origin: Should not set 'Secure; Path=/;" + extraParams + "'"
    });

    set_prefixed_cookie_via_http_test({
      prefix: "__SeCuRe-",
      params: "Secure; Path=/;" + extraParams,
      origin: self.origin,
      shouldExistViaHTTP: false,
      title: "__SeCuRe: Non-secure origin: Should not set 'Secure; Path=/;" + extraParams + "'"
    });
  });
</script>
chromium/third_party/blink/web_tests/external/wpt/cookies/prefix/__secure.header.html
