Files
cypress/system-tests/test/web_security_spec.js
Bill Glesias 9580dc2e35 breaking: default video configuration option to false (#27008)
* chore: update darwin v8 snapshot

* BREAKING CHANGE: set video to false by default (system tests need updating).

* Update cli/CHANGELOG.md

Co-authored-by: Emily Rohrbough <emilyrohrbough@users.noreply.github.com>

* chore: update type comments

* chore: update protocol snapshot

* run ci

* run ci

* set video to true for chrome browser crash test

* chore: put in workaround for failing system test spec to be fixed in 27062

* chore: allow retries on actionability tests to be at least one retry as the CI tests run faster without video on

* chore: fix flaky navigation test where done is called multiple times almsot always, but sometimes throws an error

---------

Co-authored-by: Emily Rohrbough <emilyrohrbough@users.noreply.github.com>
2023-06-20 13:21:39 -04:00

111 lines
2.6 KiB
JavaScript

const systemTests = require('../lib/system-tests').default
const onServer = function (app) {
app.get('/link', (req, res) => {
res.send('<html><h1>link</h1><a href=\'https://www.foo.com:44665/cross_origin\'>second</a></html>')
})
app.get('/cross_origin', (req, res) => {
res.send('<html><h1>cross origin</h1></html>')
})
app.get('/form', (req, res) => {
res.send(`\
<html>
<h1>form</h1>
<form method='POST' action='https://www.foo.com:44665/submit'>
<input type='submit' name='foo' value='bar' />
</form>
</html>\
`)
})
app.post('/submit', (req, res) => {
res.redirect('https://www.foo.com:44665/cross_origin')
})
app.get('/javascript', (req, res) => {
res.send(`\
<html>
<script type='text/javascript'>
window.redirect = function(){
window.location.href = 'https://www.foo.com:44665/cross_origin'
}
</script>
<h1>javascript</h1>
<button onclick='redirect()'>click me</button>
</html>\
`)
})
app.get('/cors', (req, res) => {
res.send(`<script>
fetch('https://www.foo.com:44665/cross_origin')
.then((res) => res.text())
.then(text => {
if (text.includes('cross origin')) document.write('success!')
})
.catch(err => document.write(err.message))
</script>`)
})
}
describe('e2e web security', () => {
systemTests.setup({
servers: [{
port: 4466,
onServer,
}, {
port: 44665,
https: true,
onServer,
}],
settings: {
hosts: {
'*.foo.com': '127.0.0.1',
'*.bar.com': '127.0.0.1',
'*.foobar.com': '127.0.0.1',
},
e2e: {},
},
})
context('when enabled', () => {
systemTests.it('fails', {
browser: '!webkit', // TODO(webkit): fix+unskip
spec: 'web_security.cy.js',
config: {
pageLoadTimeout: 5000,
},
snapshot: true,
expectedExitCode: 4,
})
})
context('when disabled', () => {
systemTests.it('passes', {
spec: 'web_security.cy.js',
config: {
chromeWebSecurity: false,
},
snapshot: true,
browser: ['chrome', 'electron'],
})
})
context('firefox', () => {
systemTests.it('displays warning when firefox and chromeWebSecurity:false', {
spec: 'simple_passing.cy.js',
snapshot: true,
// TODO(webkit): run this test in webkit
browser: 'firefox',
config: {
chromeWebSecurity: false,
},
onStdout (stdout) {
expect(stdout).include('Your project has set the configuration option: `chromeWebSecurity` to `false`.\n\nThis option will not have an effect in Firefox.')
},
})
})
})