unsafe-url
This page tests how Brave performs when the site specifies a very
permissive option (i.e., unsafe-url
). Brave should
treat as strict-origin-when-cross-origin
when Shields
are up.
Shields Setting | Cross-Origin? | Expected Value |
---|---|---|
Up | No | Full URL of this page |
Up | Yes | Origin of this page |
Down | No | Full URL of this page |
Down | Yes | Full URL of this page |