Apply content-security-policy to chrome://net-internals.

chrome/test/functional/special_tabs.py

 #!/usr/bin/python
 # Copyright (c) 2011 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import logging
 import os
 
 import pyauto_functional  # Must be imported before pyauto
 import pyauto
@@ skipping 40 matching lines @@
     'chrome://downloads': { 'title': 'Downloads' },
     'chrome://extensions': { 'title': 'Extensions' },
     'chrome://flags': {},
     'chrome://flash': {},
     'chrome://gpu-internals': { 'CSP': False },
     'chrome://histograms': { 'title': 'About Histograms' },
     'chrome://history': { 'title': 'History' },
     'chrome://history2': { 'title': 'History', 'CSP': False },
     'chrome://media-internals': { 'title': 'Media Internals', 'CSP': False },
     'chrome://memory-redirect': { 'title': 'About Memory' },
-    'chrome://net-internals': { 'CSP': False },
+    'chrome://net-internals': {},

[eroman, 2011/07/20 01:50:34]

Should this have a 'title' property?

[Tom Sepez, 2011/07/25 16:59:13]

Only if there is a title tag on the page itself. Otherwise, the title can be
determined from the URL.

+    'chrome://net-internals/help.html': {},
     'chrome://newtab': { 'title': 'New Tab', 'CSP': False },
     'chrome://plugins': { 'title': 'Plug-ins' },
     'chrome://sessions': { 'title': 'Sessions', 'CSP': False },
     'chrome://settings': { 'title': 'Preferences - Basics' },
     'chrome://stats': { 'CSP': False },
     'chrome://sync': { 'title': 'Sync Internals', 'CSP': False },
     'chrome://sync-internals': { 'title': 'Sync Internals', 'CSP': False },
     'chrome://terms': { 'CSP': False },
     'chrome://textfields': { 'title': 'chrome://textfields', 'CSP': False },
     'chrome://version': { 'title': 'About Version' },
@@ skipping 191 matching lines @@
       logging.debug('  %s title was %s (%s)' %
                     (url, actual_title, expected_title == actual_title))
       self.assertEqual(expected_title, actual_title)
       include_list = []
       exclude_list = []
       if 'CSP' in properties and not properties['CSP']:
         exclude_list.extend(['X-WebKit-CSP'])
       else:
         include_list.extend(['X-WebKit-CSP'])
         exclude_list.extend(['<script>', 'onclick=', 'onload=',
-                             'onchange=', 'onsubmit='])
+                             'onchange=', 'onsubmit=', 'javascript:'])
       if 'includes' in properties:
         include_list.extend(properties['includes'])
       if 'excludes' in properties:
         exclude_list.extend(properties['exlcudes'])
       test_utils.StringContentCheck(self, self.GetTabContents(),
                                     include_list, exclude_list)
 
   def testAboutAppCacheTab(self):
     """Test App Cache tab to confirm about page populates caches."""
     self.NavigateToURL('about:appcache-internals')
     self._VerifyAppCacheInternals()
     self.assertEqual('AppCache Internals', self.GetActiveTabTitle())
 
   def testAboutDNSTab(self):
     """Test DNS tab to confirm DNS about page propogates records."""
     self.NavigateToURL('about:dns')
     self._VerifyAboutDNS()
     self.assertEqual('About DNS', self.GetActiveTabTitle())
 
   def testSpecialAcceratorTabs(self):
     """Test special tabs created by acclerators like IDC_SHOW_HISTORY,
        IDC_SHOW_DOWNLOADS."""
     for accel, title in self.special_accelerator_tabs.iteritems():
       self.RunCommand(accel)
       self.assertEqual(title, self.GetActiveTabTitle())
 
 
 if __name__ == '__main__':
   pyauto_functional.Main()