E.g. virtual/outofblink-cors/http/tests/security/img-crossorigin-redirect-anonymous.html


expected:

CONSOLE ERROR: Access to image at 'http://localhost:8000/security/resources/abe.png' (redirected from 'http://localhost:8000/security/resources/cors-redirect.php?mode=anonymous&url=http://localhost:8000/security/resources/abe.png') from origin 'http://127.0.0.1:8000' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.
CONSOLE ERROR: Access to image at 'http://localhost:8000/security/resources/cors-redirect.php?mode=anonymous&url=http://localhost:8000/security/resources/abe-allow-credentials.php' from origin 'http://127.0.0.1:8000' has been blocked by CORS policy: The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's credentials mode is 'include'.
CONSOLE ERROR: Access to image at 'http://localhost:8000/security/resources/cors-redirect.php?mode=anonymous&url=http://127.0.0.1:8000/security/resources/abe-allow-credentials.php' from origin 'http://127.0.0.1:8000' has been blocked by CORS policy: The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's credentials mode is 'include'.
Testing the handling of CORS-enabled fetch in the presence of 'anonymous' redirects.

On success, you will see a series of "PASS" messages, followed by "TEST COMPLETE".


PASS/FAIL descriptions are of the form, 'CORS request type': 'redirect CORS type' => 'resource'

PASS: Anonymous request: anonymous => no-CORS image resource.
PASS: Anonymous request: anonymous => anonymous-CORS image resource.
PASS: Credentialled request: anonymous => credentialled image resource (same origin.)
PASS: Credentialled request: anonymous => credentialled image resource (cross origin.)
PASS successfullyParsed is true

TEST COMPLETE


actual:

Testing the handling of CORS-enabled fetch in the presence of 'anonymous' redirects.

On success, you will see a series of "PASS" messages, followed by "TEST COMPLETE".


PASS/FAIL descriptions are of the form, 'CORS request type': 'redirect CORS type' => 'resource'

PASS: Anonymous request: anonymous => no-CORS image resource.
PASS: Anonymous request: anonymous => anonymous-CORS image resource.
PASS: Credentialled request: anonymous => credentialled image resource (same origin.)
PASS: Credentialled request: anonymous => credentialled image resource (cross origin.)
PASS successfullyParsed is true

TEST COMPLETE