Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2024-10-21 01:05:45 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Bug 1642054 [wpt PR 23878] - Origin isolation: parse the header, a=testonly

Browse Source 
Automatic update from web-platform-tests
Origin isolation: parse the header

Bug: 1066930
Change-Id: Ib1c79f8c9218821c7da3640e012cf042666e6d50
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2222692
Commit-Queue: Domenic Denicola <domenic@chromium.org>
Reviewed-by: Kinuko Yasuda <kinuko@chromium.org>
Cr-Commit-Position: refs/heads/master@{#773706}

--

wpt-commits: d3ea88514a93b7b69687837de19b1ca6da15cf91
wpt-pr: 23878
This commit is contained in:
Domenic Denicola 2020-06-01 21:56:16 +00:00 committed by moz-wptsync-bot
parent a3fb14a3c1
commit 79e313f7a8
2 changed files with 67 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

33
testing/web-platform/tests/origin-isolation/parent-no-child-bad-subdomain.sub.https.html Normal file
View File

@ -0,0 +1,33 @@
<!DOCTYPE html>
<meta charset="utf-8">
<title>Parent is not isolated, child attempts to isolate but uses a bad header value, child is a subdomain of the parent</title>
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
<div id="log"></div>
<script type="module">
import { insertIframe, sendWasmModule, setBothDocumentDomains } from "./resources/helpers.mjs";
for (const badValue of ["", "?0", "true", "\"?1\"", "1", "?2", "(?1)"]) {
let frameWindow;
promise_test(async () => {
frameWindow = await insertIframe("{{hosts[][www]}}", badValue);
}, `"${badValue}": frame insertion`);
// Since the header values are bad there should be no isolation
promise_test(async () => {
const whatHappened = await sendWasmModule(frameWindow);
assert_equals(whatHappened, "WebAssembly.Module message received");
}, `"${badValue}": message event must occur for`);
promise_test(async () => {
await setBothDocumentDomains(frameWindow);
// Must not throw
frameWindow.document;
}, `"${badValue}": setting document.domain must give sync access`);
}
</script>

34
testing/web-platform/tests/origin-isolation/parent-no-child-yes-with-params-subdomain.sub.https.html Normal file
View File

@ -0,0 +1,34 @@
<!DOCTYPE html>
<meta charset="utf-8">
<title>Parent is not isolated, child is isolated using parameters on its structured header, child is a subdomain of the parent</title>
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
<div id="log"></div>
<script type="module">
import { insertIframe, sendWasmModule, setBothDocumentDomains } from "./resources/helpers.mjs";
let frameWindow;
promise_setup(async () => {
frameWindow = await insertIframe("{{hosts[][www]}}", "?1;param1;param2=value2");
});
// Since they're different-origin, the child's isolation request is respected,
// so the parent ends up in the site-keyed agent cluster and the child in the
// origin-keyed one.
promise_test(async () => {
const whatHappened = await sendWasmModule(frameWindow);
assert_equals(whatHappened, "messageerror");
}, "messageerror event must occur");
promise_test(async () => {
await setBothDocumentDomains(frameWindow);
assert_throws_dom("SecurityError", DOMException, () => {
frameWindow.document;
});
}, "setting document.domain should no-op instead of giving sync access");
</script>