Confirmed users
3,816
edits
| Line 137: | Line 137: | ||
=== Redirect Steps === | === Redirect Steps === | ||
* {{done|Test redirects:}} | * {{done|Test redirects:}} | ||
** force new URL scheme to some unsupported scheme --> network error | ** {{todo|force new URL scheme to some unsupported scheme --> network error}} | ||
** {{todo|force infinite loop to occur --> network error}} | ** {{todo|force infinite loop to occur --> network error}} | ||
** force disconnect or invalid response --> network error | ** {{todo|force disconnect or invalid response --> network error}} | ||
** {{done|if REQ URL contains the userinfo production (user name and password in URL) -> network error}} | ** {{done|if REQ URL contains the userinfo production (user name and password in URL) -> network error}} | ||
** REQ URL and source origin are same origin --> should get "same-origin" status (spec should be changed to still require access control headers) | ** {{done|REQ URL and source origin are same origin --> should get "same-origin" status (spec should be changed to still require access control headers)}} | ||
** access control check returns fail --> network error | ** access control check returns fail --> network error | ||
** {{done|if nothing goes wrong, ensure redirect followed and XSS XHR request rules followed}} | ** {{done|if nothing goes wrong, ensure redirect followed and XSS XHR request rules followed}} | ||