Files
sousa-gecko/testing/web-platform/tests/x-frame-options/get-decode-split.html
T
Anne van Kesteren 1fadac5ff1 Bug 2012581 [wpt PR 57341] - X-Frame-Options: don't strip 0x0B or 0x0C, a=testonly
Automatic update from web-platform-tests
X-Frame-Options: don't strip 0x0B or 0x0C

Per the specification only tabs and spaces are supposed to be trimmed.

--

wpt-commits: 6770fe822c96c2b314cc14848e600c81a2a86a11
wpt-pr: 57341
2026-01-29 12:17:41 +00:00

36 lines
759 B
HTML

<!DOCTYPE html>
<meta charset="utf-8">
<title>X-Frame-Options headers use the get, decode, and split algorithm</title>
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
<script src="support/helper.sub.js"></script>
<body>
<script>
"use strict";
xfo_simple_tests({
headerValue: `,SAMEORIGIN,,DENY,`,
sameOriginAllowed: false,
crossOriginAllowed: false
});
xfo_simple_tests({
headerValue: ` SAMEORIGIN, DENY`,
sameOriginAllowed: false,
crossOriginAllowed: false
});
xfo_simple_tests({
headerValue: `\x0BDENY`,
sameOriginAllowed: true,
crossOriginAllowed: true
});
xfo_simple_tests({
headerValue: `\x0CDENY`,
sameOriginAllowed: true,
crossOriginAllowed: true
});
</script>