Confirmed users
716
edits
| Line 123: | Line 123: | ||
* test with 0 access-control-allow-origin headers --> fail (JS: I think done) | * test with 0 access-control-allow-origin headers --> fail (JS: I think done) | ||
* test with > 1 access-control-allow-origin-headers --> fail | * test with > 1 access-control-allow-origin-headers --> fail | ||
* {{done|test with access-control-allow-origin == * && credentials flag == false ---> return pass | * {{done|test}} with access-control-allow-origin == * && credentials flag == false ---> return pass | ||
* {{done|test with access-control-allow-origin != source origin --> return fail | * {{done|test}} with access-control-allow-origin != source origin --> return fail | ||
* test with credentials flag == true && 0 access-control-allow-origin hdr --> fail (JS: I think done) | * test with credentials flag == true && 0 access-control-allow-origin hdr --> fail (JS: I think done) | ||
* test with credentials flag == true && >1 access-control-allow-origin hdr --> fail | * test with credentials flag == true && >1 access-control-allow-origin hdr --> fail | ||