prefetch: Allow GET method only

HuanPo Lin · chromium-wpt-export-bot · commit f99571208297 · 2025-05-27T00:35:08.000-07:00
Currently, only GET method is available for Prefetch. https://source.chromium.org/chromium/chromium/src/+/1000eee6f34cd07615837de97c95fd5588c9097d:content/browser/preloading/prefetch/prefetch_container.cc;l=1766;bpv=1;bpt=0 spec: https://wicg.github.io/nav-speculation/prefetch.html#create-navigation-params-from-a-prefetch-record This CL prevents other methods from using the cached prefetch results. Bug: 415942154 Change-Id: I621965073bb502046429e0e0c6fd0ccb50684626 Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6512394 Reviewed-by: Taiyo Mizuhashi <taiyo@chromium.org> Commit-Queue: Huanpo Lin <robertlin@chromium.org> Reviewed-by: Hiroshige Hayashizaki <hiroshige@chromium.org> Cr-Commit-Position: refs/heads/main@{#1465744}
diff --git a/speculation-rules/prefetch/no-prefetch-for-post.https.html b/speculation-rules/prefetch/no-prefetch-for-post.https.html
@@ -0,0 +1,25 @@
+<!DOCTYPE html>
+<meta name="timeout" content="long">
+<script src="/resources/testharness.js"></script>
+<script src="/resources/testharnessreport.js"></script>
+<script src="/common/dispatcher/dispatcher.js"></script>
+<script src="/common/utils.js"></script>
+<script src="../resources/utils.js"></script>
+<script src="resources/utils.sub.js"></script>
+<script>
+  setup(() => assertSpeculationRulesIsSupported());
+
+  promise_test(async t => {
+    let agent = await spawnWindow(t);
+    let nextUrl = agent.getExecutorURL({ executor: 'post-navigation-handler.py', protocol: 'https', page: 2 });
+    await agent.forceSinglePrefetch(nextUrl);
+
+  await agent.execute_script(async (nextUrl) => {
+    window.executor.suspend(() => {
+        navigate_by_form_generated_post(nextUrl);
+    });
+  }, [nextUrl]);
+
+    assert_not_prefetched(await agent.getRequestHeaders());
+  }, "post navigations should not use cached prefetch");
+</script>
diff --git a/speculation-rules/prefetch/resources/executor.sub.html b/speculation-rules/prefetch/resources/executor.sub.html
@@ -82,6 +82,13 @@
   await new test_driver.Actions().addPointer("mouse").pointerMove(0, 0, {origin: target}).pointerDown().pointerMove(0, 0).pointerUp().send();
 }
 
+async function navigate_by_form_generated_post(url) {
+  let form = document.createElement('form');
+  form.method = 'POST';
+  form.action = url;
+  document.body.appendChild(form);
+  form.submit();
+}
 
 // The fetch request's URL sent to the server.
 window.requestUrl = reverse_html_escape(
diff --git a/speculation-rules/prefetch/resources/post-navigation-handler.py b/speculation-rules/prefetch/resources/post-navigation-handler.py
@@ -0,0 +1,10 @@
+import os
+from wptserve.pipes import template
+
+# This is used only to accept POST navigations.
+def main(request, response):
+    response.headers.set(b"Content-Type", b"text/html")
+    response.headers.set(b"Cache-Control", b"no-store")
+    response.content = template(
+    request,
+    open(os.path.join(os.path.dirname(__file__), "executor.sub.html"), "rb").read())
