| OLD | NEW |
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "chrome/common/extensions/csp_validator.h" | 5 #include "chrome/common/extensions/csp_validator.h" |
| 6 #include "testing/gtest/include/gtest/gtest.h" | 6 #include "testing/gtest/include/gtest/gtest.h" |
| 7 | 7 |
| 8 using extensions::csp_validator::ContentSecurityPolicyIsLegal; | 8 using extensions::csp_validator::ContentSecurityPolicyIsLegal; |
| 9 using extensions::csp_validator::ContentSecurityPolicyIsSecure; | 9 using extensions::csp_validator::ContentSecurityPolicyIsSecure; |
| 10 using extensions::csp_validator::ContentSecurityPolicyIsSandboxed; | 10 using extensions::csp_validator::ContentSecurityPolicyIsSandboxed; |
| (...skipping 45 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 56 "default-src *; script-src 'self'; img-src 'self'", | 56 "default-src *; script-src 'self'; img-src 'self'", |
| 57 Extension::TYPE_EXTENSION)); | 57 Extension::TYPE_EXTENSION)); |
| 58 EXPECT_TRUE(ContentSecurityPolicyIsSecure( | 58 EXPECT_TRUE(ContentSecurityPolicyIsSecure( |
| 59 "default-src *; script-src 'self'; object-src 'self'", | 59 "default-src *; script-src 'self'; object-src 'self'", |
| 60 Extension::TYPE_EXTENSION)); | 60 Extension::TYPE_EXTENSION)); |
| 61 EXPECT_TRUE(ContentSecurityPolicyIsSecure( | 61 EXPECT_TRUE(ContentSecurityPolicyIsSecure( |
| 62 "script-src 'self'; object-src 'self'", Extension::TYPE_EXTENSION)); | 62 "script-src 'self'; object-src 'self'", Extension::TYPE_EXTENSION)); |
| 63 EXPECT_TRUE(ContentSecurityPolicyIsSecure( | 63 EXPECT_TRUE(ContentSecurityPolicyIsSecure( |
| 64 "default-src 'unsafe-eval'", Extension::TYPE_EXTENSION)); | 64 "default-src 'unsafe-eval'", Extension::TYPE_EXTENSION)); |
| 65 EXPECT_TRUE(ContentSecurityPolicyIsSecure( | 65 EXPECT_TRUE(ContentSecurityPolicyIsSecure( |
| 66 "default-src 'unsafe-eval'", Extension::TYPE_PACKAGED_APP)); | 66 "default-src 'unsafe-eval'", Extension::TYPE_LEGACY_PACKAGED_APP)); |
| 67 | 67 |
| 68 EXPECT_FALSE(ContentSecurityPolicyIsSecure( | 68 EXPECT_FALSE(ContentSecurityPolicyIsSecure( |
| 69 "default-src 'unsafe-eval'", Extension::TYPE_PLATFORM_APP)); | 69 "default-src 'unsafe-eval'", Extension::TYPE_PLATFORM_APP)); |
| 70 EXPECT_FALSE(ContentSecurityPolicyIsSecure( | 70 EXPECT_FALSE(ContentSecurityPolicyIsSecure( |
| 71 "default-src 'unsafe-inline'", Extension::TYPE_EXTENSION)); | 71 "default-src 'unsafe-inline'", Extension::TYPE_EXTENSION)); |
| 72 EXPECT_FALSE(ContentSecurityPolicyIsSecure( | 72 EXPECT_FALSE(ContentSecurityPolicyIsSecure( |
| 73 "default-src 'unsafe-inline' 'none'", Extension::TYPE_EXTENSION)); | 73 "default-src 'unsafe-inline' 'none'", Extension::TYPE_EXTENSION)); |
| 74 EXPECT_FALSE(ContentSecurityPolicyIsSecure( | 74 EXPECT_FALSE(ContentSecurityPolicyIsSecure( |
| 75 "default-src 'self' http://google.com", Extension::TYPE_EXTENSION)); | 75 "default-src 'self' http://google.com", Extension::TYPE_EXTENSION)); |
| 76 EXPECT_TRUE(ContentSecurityPolicyIsSecure( | 76 EXPECT_TRUE(ContentSecurityPolicyIsSecure( |
| (...skipping 71 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 148 // Extensions allow navigation and popups, platform apps don't. | 148 // Extensions allow navigation and popups, platform apps don't. |
| 149 EXPECT_TRUE(ContentSecurityPolicyIsSandboxed( | 149 EXPECT_TRUE(ContentSecurityPolicyIsSandboxed( |
| 150 "sandbox allow-top-navigation", Extension::TYPE_EXTENSION)); | 150 "sandbox allow-top-navigation", Extension::TYPE_EXTENSION)); |
| 151 EXPECT_FALSE(ContentSecurityPolicyIsSandboxed( | 151 EXPECT_FALSE(ContentSecurityPolicyIsSandboxed( |
| 152 "sandbox allow-top-navigation", Extension::TYPE_PLATFORM_APP)); | 152 "sandbox allow-top-navigation", Extension::TYPE_PLATFORM_APP)); |
| 153 EXPECT_TRUE(ContentSecurityPolicyIsSandboxed( | 153 EXPECT_TRUE(ContentSecurityPolicyIsSandboxed( |
| 154 "sandbox allow-popups", Extension::TYPE_EXTENSION)); | 154 "sandbox allow-popups", Extension::TYPE_EXTENSION)); |
| 155 EXPECT_FALSE(ContentSecurityPolicyIsSandboxed( | 155 EXPECT_FALSE(ContentSecurityPolicyIsSandboxed( |
| 156 "sandbox allow-popups", Extension::TYPE_PLATFORM_APP)); | 156 "sandbox allow-popups", Extension::TYPE_PLATFORM_APP)); |
| 157 } | 157 } |
| OLD | NEW |