dherman asked me on IRC what happened when an XHR from one origin was moved by chrome into another origin. There didn't appear to be any tests for this, so I wrote one.
Created attachment 557719 [details] [diff] [review]
Is there anything else I should be testing here?
Comment on attachment 557719 [details] [diff] [review]
Also try setting xhr.withCredentials to check that setting attributes also throw.
r=me with that.