Source code
Revision control
Copy as Markdown
Other Tools
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Scope Extensions - Unauthorized Target</title>
<script>
function reportDisplayMode() {
const displayMode = matchMedia("(display-mode: standalone)").matches ?
"standalone" : "browser";
document.querySelector("#display-mode").textContent =
`Reported display mode: ${displayMode}. Display mode alone does not ` +
"determine whether this URL is out of scope.";
}
addEventListener("DOMContentLoaded", reportDisplayMode);
</script>
</head>
<body>
<h1>Unauthorized Scope Extension Target</h1>
<p>
This origin does not authorize the installed app's manifest ID in its
<code>web-app-origin-association</code> response.
</p>
<p>
<strong>Expected:</strong> This URL is treated as outside the app's scope.
The user agent can open it in a browser tab or display its normal
out-of-scope UI, but it must not receive the same in-scope treatment as the
authorized target.
</p>
<p id="display-mode"></p>
<p>
Return to the test page using Back. If this target opened in a separate tab
or window, close it instead.
</p>
<button type="button" onclick="history.back()">Return using Back</button>
</body>
</html>