img-crossorigin-redirect-no-cors.html

<!DOCTYPE HTML>
<script src="/js-test-resources/js-test.js"></script>
<script>
description("Testing the handling of CORS-enabled fetch in the presence of 'No CORS' redirects.");

// Explain the short form descriptions ('=>' representing the redirect.)
debug("PASS/FAIL descriptions are of the form, 'CORS request type': 'redirect CORS type' => 'resource'");
debug("");

var redirect_cors = "no";

window.jsTestIsAsync = true;
if (window.testRunner)
    testRunner.dumpAsText();

function finish() {
    if (window.testRunner)
        finishJSTest();
}

function fail() {
    debug("FAIL: " + this.description);
    runNextTest();
}

function pass() {
    debug("PASS: " + this.description);
    runNextTest();
}

// All redirects are non-CORS, no fetches expected to complete.
var tests = [
    { description: "Anonymous request: no-CORS => no-CORS image resource.",
      url: "http://localhost:8000/security/resources/abe.png",
      success: false,
      access: "anonymous"},
    { description: "Anonymous request: no-CORS => anonymous-CORS image resource.",
      url: "http://localhost:8000/security/resources/abe-allow-star.php",
      success: false,
      access: "anonymous"},
    { description: "Credentialled request: no-CORS => credential-CORS image resource (same origin.)",
      url: "http://localhost:8000/security/resources/abe-allow-credentials.php",
      success: false,
      access: "use-credentials"},
    { description: "Credentialled request: no-CORS => credential-CORS image resource (cross origin.)",
      url: "http://127.0.0.1:8000/security/resources/abe-allow-credentials.php",
      success: false,
      access: "use-credentials"},
    ];

function runNextTest() {
    if (!tests.length) {
	finish();
	return;
    }
    var test = tests.shift();
    var img = new Image();
    img.onload = test.success ? pass : fail;
    img.onerror = test.success ? fail : pass;
    img.crossOrigin = test.access;
    img.description = test.description;
    var args = [ "mode=" + redirect_cors,
		 "url=" + test.url];
    img.src = "http://localhost:8000/security/resources/cors-redirect.php?" + args.join("&");
    document.body.appendChild(img);
}
window.onload = runNextTest;
</script>
chromium/third_party/blink/web_tests/http/tests/security/img-crossorigin-redirect-no-cors.html
