visiting `https` then `http` of same subdomain fails saying you can only visit a single unique domain per test

what_it_does:

CypressError: cy.visit() failed because you are attempting to visit a second unique domain.

You may only visit a single unique domain per test.

Different subdomains are okay, but unique domains are not.

The previous domain you visited was: 'https://www.sina.com.cn'

You're attempting to visit this new domain: 'http://sports.sina.com.cn'

http://sports.sina.com.cn is subdomain , but error. https://sports.sina.com.cn is ok.

Current behavior:

Desired behavior:

Steps to reproduce: (app code and test code)

Versions

Cypress: 3.8.0 │ Browser: Electron 78 (headless)

[jennifer-shehane]

Why

Ok, so, after discussing this with the team, this is actually expected behavior.

The rules for what we have been calling a ‘single unique domain per test’ are technically following the rules of Same Origin Policy as outlined here: https://developer.mozilla.org/en-US/docs/Web/Security/Same-origin_policy

Two URLs have the same origin if the protocol, port (if specified), and host are the same for both.

So visiting a different protocol (http to https) is not considered the same protocol.

The reason the http to https often works is because of the websites rerouting rules.

Next steps

1. The error message we are throwing in the Test Runner is completely confusing in this regard. We only mention a ‘single domain’ policy and should be more specific to call out same origin policy. This error message should be updated.
2. The documentation is just wrong. We talk about superdomain and then even mention http and https specifically being the same and following the rules. https://on.cypress.io/trade-offs#Same-origin I’ve created an issue to update this here: https://github.com/cypress-io/cypress-documentation/issues/2364

[cypress-bot[bot]]

Released in 4.1.0.

This comment thread has been locked. If you are still experiencing this issue after upgrading to Cypress v4.1.0, please open a new issue.