+ QUnit.test( 'origin is not included in same-origin GET requests', function ( assert ) {
+ var apiUrl = location.protocol + '//' + location.host + '/w/api.php',
+ api = new mw.ForeignApi( apiUrl );
+
+ this.server.respond( function ( request ) {
+ assert.strictEqual( request.url.match( /origin=.*?(?:&|$)/ ), null, 'origin is not included in GET requests' );
+ request.respond( 200, { 'Content-Type': 'application/json' }, '[]' );
+ } );
+
+ return api.get( {} );
+ } );
+
+ QUnit.test( 'origin is not included in same-origin POST requests', function ( assert ) {
+ var apiUrl = location.protocol + '//' + location.host + '/w/api.php',
+ api = new mw.ForeignApi( apiUrl );
+
+ this.server.respond( function ( request ) {
+ assert.strictEqual( request.requestBody.match( /origin=.*?(?:&|$)/ ), null, 'origin is not included in POST request body' );
+ assert.strictEqual( request.url.match( /origin=.*?(?:&|$)/ ), null, 'origin is not included in POST request URL, either' );
+ request.respond( 200, { 'Content-Type': 'application/json' }, '[]' );
+ } );
+
+ return api.post( {} );
+ } );
+