RESOLVED FIXED 165407
Test insecure-xhr-sync-in-main-frame.html fails with CORS error if run before r203542
https://bugs.webkit.org/show_bug.cgi?id=165407
Summary Test insecure-xhr-sync-in-main-frame.html fails with CORS error if run before...
Daniel Bates
Reported 2016-12-05 13:11:38 PST
In <https://trac.webkit.org/changeset/203542> (bug #105462) the test LayoutTests/http/tests/security/mixedContent/insecure-xhr-sync-in-main-frame.html was added to ensure that we block loading insecure data via XHR from an HTTPS page. When this test is run prior to r203542 it fails due to a CORS errors (response cannot be read because it does not list 127.0.0.1:8000 in its Access-Control-Allow-Origin HTTP header) as opposed to showing the intended JavaScript alert failure message. For correctness, we should make this test fail as intended without the fix for r203542.
Attachments
Layout Test (3.71 KB, patch)
2016-12-05 13:13 PST, Daniel Bates
no flags
Daniel Bates
Comment 1 2016-12-05 13:13:14 PST
Created attachment 296179 [details] Layout Test
Daniel Bates
Comment 2 2016-12-06 09:46:21 PST
Comment on attachment 296179 [details] Layout Test Clearing flags on attachment: 296179 Committed r209401: <http://trac.webkit.org/changeset/209401>
Daniel Bates
Comment 3 2016-12-06 09:46:24 PST
All reviewed patches have been landed. Closing bug.
Note You need to log in before you can comment on or make changes to this bug.