security/manager/ssl/tests/mochitest/stricttransportsecurity/verify.sjs
author Jeff Walden <jwalden@mit.edu>
Tue, 19 Nov 2019 04:55:39 +0000
changeset 502538 b5c5ba07d3dbd0d07b66fa42a103f4df2c27d3a2
parent 95411 e6da6ece3818eed14dd357220970bfc1d3bfe6e7
permissions -rw-r--r--
Bug 1596544 - intl_ValidateAndCanonicalizeUnicodeExtensionType should ignore the second |option| argument until it's needed to report an error. r=anba Differential Revision: https://phabricator.services.mozilla.com/D53145

/* This Source Code Form is subject to the terms of the Mozilla Public
 * License, v. 2.0. If a copy of the MPL was not distributed with this
 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */

// SJS file that serves un-cacheable responses for STS tests that postMessage
// to the parent saying whether or not they were loaded securely.

function handleRequest(request, response)
{
  var query = {};
  request.queryString.split('&').forEach(function (val) {
      var [name, value] = val.split('=');
      query[name] = unescape(value);
  });

  response.setHeader("Cache-Control", "no-cache", false);
  response.setHeader("Content-Type", "text/html", false);

  if ('id' in query) {
    var outstr = [
       " <!DOCTYPE html>",
       " <html> <head> <title>subframe for STS</title>",
       " <script type='text/javascript'>",
       " var self = window;",
       " window.addEventListener('load', function() {",
       "     if (document.location.protocol === 'https:') {",
       "       self.parent.postMessage('SECURE " + query['id'] + "',",
       "                               'http://mochi.test:8888');",
       "     } else {",
       "       self.parent.postMessage('INSECURE " + query['id'] + "',",
       "                               'http://mochi.test:8888');",
       "     }",
       "   }, false);",
       "   </script>",
       "   </head>",
       " <body>",
       "   STS state verification frame loaded via",
       " <script>",
       "   document.write(document.location.protocol);",
       " </script>",
       " </body>",
       " </html>"].join("\n");
    response.write(outstr);
  } else {
    response.write("ERROR: no id provided");
  }
}