Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2024-10-21 17:25:36 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Bug 1638177 [wpt PR 23624] - Origin isolation: test that insecure HTTP is not supported, a=testonly

Browse Source 
Automatic update from web-platform-tests
Origin isolation: test that insecure HTTP is not supported

Bug: 1042415
Change-Id: I2acd2fea79a12e1f60eb9a0114abcf61630e269a
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2202512
Commit-Queue: Domenic Denicola <domenic@chromium.org>
Reviewed-by: James MacLean <wjmaclean@chromium.org>
Cr-Commit-Position: refs/heads/master@{#774243}

--

wpt-commits: e7e5f03642e0d32eac9965ee993efa589fb3997d
wpt-pr: 23624

Differential Revision: https://phabricator.services.mozilla.com/D78791
This commit is contained in:
Domenic Denicola 2020-06-09 10:25:43 +00:00
parent b99a05ea64
commit 3ab8b2e2dd
2 changed files with 33 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
testing/web-platform/tests/origin-isolation/insecure-http.sub.html Normal file
View File

@ -0,0 +1,32 @@
<!DOCTYPE html>
<meta charset="utf-8">
<title>Parent requests isolation, child requests isolation, child is a subdomain of the parent, but all over insecure HTTP</title>
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
<div id="log"></div>
<script type="module">
import { insertIframe, sendWasmModule, setBothDocumentDomains } from "./resources/helpers.mjs";
let frameWindow;
promise_setup(async () => {
frameWindow = await insertIframe("{{hosts[][www]}}", "?1");
});
// All isolation requests are ignored, since this is over insecure HTTP.
// So both end up in the site-keyed agent cluster.
promise_test(async () => {
const whatHappened = await sendWasmModule(frameWindow);
assert_equals(whatHappened, "WebAssembly.Module message received");
}, "message event must occur");
promise_test(async () => {
await setBothDocumentDomains(frameWindow);
// Must not throw
frameWindow.document;
}, "setting document.domain must give sync access");
</script>

1
testing/web-platform/tests/origin-isolation/insecure-http.sub.html.headers Normal file
View File

@ -0,0 +1 @@
Origin-Isolation: ?1