Confirmed users
3,816
edits
QA/Firefox3.5/XHR TestPlan: Difference between revisions
Jump to navigation
Jump to search
→Test cases
| Line 29: | Line 29: | ||
* force preflight to false try a REQ with a header that contains a header not in the header whitelist | * force preflight to false try a REQ with a header that contains a header not in the header whitelist | ||
* force preflight to be true and try a REQ that is GET or POST and contains whitelist headers (should still do preflight check) | * force preflight to be true and try a REQ that is GET or POST and contains whitelist headers (should still do preflight check) | ||
* perform a simple XSS REQ and get a RESP header not in RESP header whitelist (UA should filter it out) | * perform a simple XSS REQ and get a RESP header not in RESP header whitelist (UA should filter it out - get AllResponseHeaders should always return an empty string, but getResponseHeader should not return the specific header we are asking for) | ||
* perform a REQ that gets the URL return flag and then fetches the same site URL (necessary??) | * perform a REQ that gets the URL return flag and then fetches the same site URL (necessary??) | ||
* is it useful to attempt faking the origin settng on a XHR request? | * is it useful to attempt faking the origin settng on a XHR request? | ||