This is an archive of the discontinued Mercurial Phabricator instance.

Status	Author	Revision
Closed	indygreg	D3436 hgweb: allow Content-Security-Policy header on 304 responses (issue5844)
Closed	indygreg	D3435 hgweb: discard Content-Type header for 304 responses (issue5844)
Closed	indygreg	D3434 tests: add tests demonstrating ISE for HTTP 304 responses with hgwebdir

Diff 8446

	content-security-policy: script-src https://example.com/ 'unsafe-inline'			content-security-policy: script-src https://example.com/ 'unsafe-inline'

	static page should send CSP when enabled			static page should send CSP when enabled

	$ get-with-headers.py --headeronly localhost:$HGPORT static/mercurial.js content-security-policy etag			$ get-with-headers.py --headeronly localhost:$HGPORT static/mercurial.js content-security-policy etag
	200 Script output follows			200 Script output follows
	content-security-policy: script-src https://example.com/ 'unsafe-inline'			content-security-policy: script-src https://example.com/ 'unsafe-inline'

				$ get-with-headers.py --twice --headeronly localhost:$HGPORT repo1/static/style.css content-security-policy
				200 Script output follows
				content-security-policy: script-src https://example.com/ 'unsafe-inline'
				500 Internal Server Error
				[1]

	repo page should send CSP by default, include etag w/o nonce			repo page should send CSP by default, include etag w/o nonce

	$ get-with-headers.py --headeronly localhost:$HGPORT repo1 content-security-policy etag			$ get-with-headers.py --headeronly localhost:$HGPORT repo1 content-security-policy etag
	200 Script output follows			200 Script output follows
	content-security-policy: script-src https://example.com/ 'unsafe-inline'			content-security-policy: script-src https://example.com/ 'unsafe-inline'
	etag: W/"*" (glob)			etag: W/"*" (glob)

	nonce should not be added to html if CSP doesn't use it			nonce should not be added to html if CSP doesn't use it

	200 Script output follows			200 Script output follows
	transfer-encoding: chunked			transfer-encoding: chunked
	content-type: text/plain			content-type: text/plain

	partial content			partial content
	Internal Server Error (no-eol)			Internal Server Error (no-eol)

	$ killdaemons.py			$ killdaemons.py

				HTTP 304 works with hgwebdir (issue5844)

				$ cat > hgweb.conf << EOF
				> [paths]
				> /repo = $TESTTMP/test
				> EOF

				$ hg serve --web-conf hgweb.conf -p $HGPORT -d --pid-file hg.pid -E error.log
				$ cat hg.pid >> $DAEMON_PIDS

				$ get-with-headers.py --twice --headeronly localhost:$HGPORT 'repo/static/style.css' - date etag server
				200 Script output follows
				content-length: 2677
				content-type: text/css
				500 Internal Server Error
				transfer-encoding: chunked
				[1]

				$ killdaemons.py

	$ cd ..			$ cd ..