Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/http/tests/security/XFrameOptions/resources/nph-cached-xfo.pl 

#!/usr/bin/perl
# Script to generate a 304 HTTP status with (illegal) X-Frame-Options headers.
# Relies on its nph- filename to invoke the CGI non-parsed-header facility.

$protocol = $ENV{'SERVER_PROTOCOL'};
$software = $ENV{'SERVER_SOFTWARE'};
$if_modified = $ENV{'HTTP_IF_MODIFIED_SINCE'};

if ($if_modified) {
    print "$protocol 304 Not Modified\r\n";
    print "Server: $software\r\n";
    print "X-Frame-Options: deny\r\n";
    print "Connection: close\r\n";
    exit(0);
}

print "$protocol 200 OK\r\n";
print "Server: $software\r\n";
print "Content-type: text/html\r\n";
print "Expires: Wed, 21 Nov 2037 19:19:13 +0000\r\n";
print "Last-Modified: Mon, 08 Nov 2010 19:19:13 +0000\r\n";
print "X-Frame-Options: allowall\r\n";
print "\r\n";
print "<!DOCTYPE html>\r\n";
print "<html>\r\n";
print "<body>\r\n";
print "<script>alert(\"This must fire twice\");</script>\r\n";
print "</body>\r\n";
print "</html>\r\n";