Bug 165407

Summary: Test insecure-xhr-sync-in-main-frame.html fails with CORS error if run before r203542
Product: WebKit Reporter: Daniel Bates <dbates>
Component: Tools / TestsAssignee: Daniel Bates <dbates>
Status: RESOLVED FIXED    
Severity: Normal CC: bfulgham, lforschler, wilander
Priority: P2    
Version: WebKit Local Build   
Hardware: All   
OS: All   
Attachments:
Description Flags
Layout Test none

Daniel Bates
Reported 2016-12-05 13:11:38 PST
In <https://trac.webkit.org/changeset/203542> (bug #105462) the test LayoutTests/http/tests/security/mixedContent/insecure-xhr-sync-in-main-frame.html was added to ensure that we block loading insecure data via XHR from an HTTPS page. When this test is run prior to r203542 it fails due to a CORS errors (response cannot be read because it does not list 127.0.0.1:8000 in its Access-Control-Allow-Origin HTTP header) as opposed to showing the intended JavaScript alert failure message. For correctness, we should make this test fail as intended without the fix for r203542.
Attachments
Layout Test (3.71 KB, patch)
2016-12-05 13:13 PST, Daniel Bates 		no flags
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Daniel Bates
Comment 1 2016-12-05 13:13:14 PST
Created attachment 296179 [details] Layout Test
Daniel Bates
Comment 2 2016-12-06 09:46:21 PST
Comment on attachment 296179 [details] Layout Test Clearing flags on attachment: 296179 Committed r209401: <http://trac.webkit.org/changeset/209401>
Daniel Bates
Comment 3 2016-12-06 09:46:24 PST
All reviewed patches have been landed. Closing bug.
Note You need to log in before you can comment on or make changes to this bug.