<!DOCTYPE html> <html> <head> <title>XMLHttpRequest: getAllResponseHeaders() excludes cookies</title> <script src="/resources/testharness.js"></script> <script src="/resources/testharnessreport.js"></script> <link rel="help" href="https://xhr.spec.whatwg.org/#dom-xmlhttprequest-getallresponseheaders" data-tested-assertations="/following::OL[1]/LI[1] /following::OL[1]/LI[3]" /> </head> <body> <div id="log"></div> <script> var test = async_test() test.step(function() { var client = new XMLHttpRequest() assert_equals(client.getAllResponseHeaders(), "") client.onreadystatechange = function() { test.step(function() { var headers = client.getAllResponseHeaders().toLowerCase() if(client.readyState == 1) { assert_equals(headers, "") } if(client.readyState > 1) { assert_true(headers.indexOf("\r\n") != -1, "carriage return") assert_true(headers.indexOf("content-type") != -1, "content-type") assert_true(headers.indexOf("x-custom-header") != -1, "x-custom-header") assert_false(headers.indexOf("set-cookie") != -1, "set-cookie") assert_false(headers.indexOf("set-cookie2") != -1, "set-cookie2") } if(client.readyState == 4) test.done() }) } client.open("GET", "resources/headers.py") client.send(null) }) </script> </body> </html>