Source code
Revision control
Copy as Markdown
Other Tools
Test Info: Warnings
- This test has a WPT meta file that expects 4 subtest issues.
- This WPT test may be referenced by the following Test IDs:
- /fetch/security/embedded-credentials.tentative.sub.html - WPT Dashboard Interop Dashboard
<!DOCTYPE html>
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
<body>
<script>
async_test(t => {
var i = document.createElement('img');
i.onerror = t.step_func_done();
i.onload = t.unreached_func("'onload' should not fire.");
![http://user:pass@{{domains[www]}}:{{ports[http][0]}}/images/red.png](http://user:pass@{{domains[www]}}:{{ports[http][0]}}/images/red.png){kind=link}
}, "Embedded credentials are treated as network errors.");
async_test(t => {
var i = document.createElement('iframe');
i.src = "./support/embedded-credential-window.sub.html";
i.onload = t.step_func(_ => {
var c = new MessageChannel();
c.port1.onmessage = t.step_func_done(e => {
assert_equals(e.data, "Error", "The image should not load.");
i.remove();
});
i.contentWindow.postMessage("Hi!", "*", [c.port2]);
});
document.body.appendChild(i);
}, "Embedded credentials are treated as network errors in frames.");
async_test(t => {
var w = window.open("./support/embedded-credential-window.sub.html");
window.addEventListener("message", t.step_func(message => {
if (message.source != w)
return;
var c = new MessageChannel();
c.port1.onmessage = t.step_func_done(e => {
w.close();
assert_equals(e.data, "Error", "The image should not load.");
});
w.postMessage("absolute", "*", [c.port2]);
}));
}, "Embedded credentials are treated as network errors in new windows.");
async_test(t => {
var w = window.open();
w.location.href = "http://user:pass@{{domains[www]}}:{{ports[http][0]}}/fetch/security/support/embedded-credential-window.sub.html";
window.addEventListener("message", t.step_func(message => {
if (message.source != w)
return;
var c = new MessageChannel();
c.port1.onmessage = t.step_func_done(e => {
w.close();
assert_equals(e.data, "Load", "The image should load.");
});
w.postMessage("relative", "*", [c.port2]);
}));
}, "Embedded credentials matching the top-level are not treated as network errors for relative URLs.");
async_test(t => {
var w = window.open();
w.location.href = "http://user:pass@{{domains[www]}}:{{ports[http][0]}}/fetch/security/support/embedded-credential-window.sub.html";
window.addEventListener("message", t.step_func(message => {
if (message.source != w)
return;
var c = new MessageChannel();
c.port1.onmessage = t.step_func_done(e => {
w.close();
assert_equals(e.data, "Load", "The image should load.");
});
w.postMessage("same-origin-matching", "*", [c.port2]);
}));
}, "Embedded credentials matching the top-level are not treated as network errors for same-origin URLs.");
async_test(t => {
var w = window.open();
w.location.href = "http://user:pass@{{domains[www]}}:{{ports[http][0]}}/fetch/security/support/embedded-credential-window.sub.html";
window.addEventListener("message", t.step_func(message => {
if (message.source != w)
return;
var c = new MessageChannel();
c.port1.onmessage = t.step_func_done(e => {
w.close();
assert_equals(e.data, "Error", "The image should load.");
});
w.postMessage("cross-origin-matching", "*", [c.port2]);
}));
}, "Embedded credentials matching the top-level are treated as network errors for cross-origin URLs.");
</script>