Source code
Revision control
Copy as Markdown
Other Tools
Test Info:
- Manifest: dom/fetch/tests/browser.toml
const TOP_LEVEL_URL =
getRootDirectory(gTestPath).replace(
) + "open_credentialless_document.sjs";
const GET_STATE_URL =
getRootDirectory(gTestPath).replace(
) + "store_header.sjs?getstate";
async function addCookieToOrigin(origin) {
const fetchRequestURL =
"store_header.sjs?addcookie";
const addcookieTab = await BrowserTestUtils.openNewForegroundTab(
gBrowser,
fetchRequestURL
);
await SpecialPowers.spawn(addcookieTab.linkedBrowser, [], async function () {
content.document.cookie = "coep=credentialless; SameSite=None; Secure";
});
await BrowserTestUtils.removeTab(addcookieTab);
}
async function testOrigin(
fetchOrigin,
isCredentialless,
useMetaTag,
fetchRequestMode,
fetchRequestCrendentials,
expectedCookieResult
) {
let params = [];
if (isCredentialless) {
params.push("credentialless");
}
if (useMetaTag) {
params.push("meta");
}
let topLevelUrl = TOP_LEVEL_URL;
if (params.length) {
topLevelUrl += "?" + params.join("&");
}
const noCredentiallessTab = await BrowserTestUtils.openNewForegroundTab(
gBrowser,
topLevelUrl
);
const fetchRequestURL =
getRootDirectory(gTestPath).replace(
fetchOrigin
) + "store_header.sjs?checkheader";
await SpecialPowers.spawn(
noCredentiallessTab.linkedBrowser,
[
!useMetaTag && isCredentialless,
fetchRequestURL,
fetchRequestMode,
fetchRequestCrendentials,
GET_STATE_URL,
expectedCookieResult,
],
async function (
sharedArrayBufferEnabled,
fetchRequestURL,
fetchRequestMode,
fetchRequestCrendentials,
getStateURL,
expectedCookieResult
) {
if (sharedArrayBufferEnabled) {
ok(content.crossOriginIsolated);
}
// When store_header.sjs receives this request, it will store
// whether it has received the cookie as a shared state.
await content.fetch(fetchRequestURL, {
mode: fetchRequestMode,
credentials: fetchRequestCrendentials,
});
// This request is used to get the saved state from the
// previous fetch request.
const response = await content.fetch(getStateURL, {
mode: "cors",
});
const text = await response.text();
is(text, expectedCookieResult);
}
);
await BrowserTestUtils.removeTab(noCredentiallessTab);
}
async function doTest(
origin,
fetchRequestMode,
fetchRequestCrendentials,
expectedCookieResultForNoCredentialless,
expectedCookieResultForCredentialless
) {
for (let credentialless of [true, false]) {
for (let meta of [true, false]) {
await testOrigin(
origin,
credentialless,
meta,
fetchRequestMode,
fetchRequestCrendentials,
credentialless
? expectedCookieResultForCredentialless
: expectedCookieResultForNoCredentialless
);
}
}
}
add_task(async function () {
await SpecialPowers.pushPrefEnv({
set: [
["browser.tabs.remote.coep.credentialless", false],
["dom.origin-trials.enabled", true],
["dom.origin-trials.test-key.enabled", true],
],
});
await addCookieToOrigin(SAME_ORIGIN);
await addCookieToOrigin(CROSS_ORIGIN);
// Cross-origin CORS requests contains Cookies, if credentials mode is set to
// 'include'. This does not depends on COEP.
await doTest(CROSS_ORIGIN, "cors", "include", "hasCookie", "hasCookie");
await doTest(CROSS_ORIGIN, "cors", "same-origin", "noCookie", "noCookie");
// Cross-origin no-CORS requests includes Cookies when:
// 1. credentials mode is 'include'
// 2. COEP: is not credentialless.
await doTest(CROSS_ORIGIN, "no-cors", "include", "hasCookie", "noCookie");
await doTest(CROSS_ORIGIN, "no-cors", "same-origin", "noCookie", "noCookie");
});