Replace <meta> tag with header for content-security-policy on chrome:// pages.

chrome/test/functional/special_tabs.py

 #!/usr/bin/python
 # Copyright (c) 2011 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import logging
 import os
 
 import pyauto_functional  # Must be imported before pyauto
 import pyauto
@@ skipping 25 matching lines @@
     'chrome://about': { 'title': 'Chrome URLs' },
     'chrome://appcache-internals': { 'title': 'AppCache Internals' },
     'chrome://blob-internals': { 'title': 'Blob Storage Internals' },
     'chrome://bugreport': {},
     'chrome://bugreport/#0': { 'title': 'Feedback' },
     'chrome://chrome-urls': { 'title': 'Chrome URLs' },
     'chrome://crashes': { 'title': 'Crashes' },
     'chrome://credits': { 'title': 'Credits', 'CSP': False },
     'chrome://downloads': { 'title': 'Downloads' },
     'chrome://dns': { 'title': 'About DNS' },
-    'chrome://settings/extensionSettings': { 'title': 'Extensions' },
+    'chrome://settings/extensions': { 'title': 'Extensions' },
     'chrome://flags': {},
     'chrome://flash': {},
     'chrome://gpu-internals': {},
     'chrome://histograms': { 'title': 'About Histograms' },
     'chrome://history': { 'title': 'History' },
     'chrome://history2': { 'title': 'History' },
     'chrome://media-internals': { 'title': 'Media Internals' },
     'chrome://memory-redirect': { 'title': 'About Memory' },
     'chrome://net-internals': {},
     'chrome://net-internals/help.html': {},
     'chrome://newtab': { 'title': 'New Tab', 'CSP': False },
     'chrome://plugins': { 'title': 'Plug-ins' },
     'chrome://sessions': { 'title': 'Sessions' },
     'chrome://settings': { 'title': 'Preferences - Basics' },
-    'chrome://stats': { 'CSP': False },
+    'chrome://stats': {},
     'chrome://sync': { 'title': 'Sync Internals' },
     'chrome://sync-internals': { 'title': 'Sync Internals' },
     'chrome://tasks': { 'title': 'Task Manager - Chromium' },
-    'chrome://terms': { 'CSP': False },
+    'chrome://terms': {},
     'chrome://textfields': { 'title': 'chrome://textfields', 'CSP': False },
     'chrome://version': { 'title': 'About Version' },
     'chrome://view-http-cache': {},
     'chrome://workers': { 'title': 'Workers' },
   }
   broken_special_url_tabs = {
     # crashed under debug when invoked from location bar (bug 88223).
     'chrome://devtools': { 'CSP': False },
 
     # returns "not available" despite having an URL constant.
@@ skipping 198 matching lines @@
     for url, properties in tabs.iteritems():
       logging.debug('Testing URL %s.' % url)
       self.NavigateToURL(url)
       expected_title = 'title' in properties and properties['title'] or url
       actual_title = self.GetActiveTabTitle()
       logging.debug('  %s title was %s (%s)' %
                     (url, actual_title, expected_title == actual_title))
       self.assertEqual(expected_title, actual_title)
       include_list = []
       exclude_list = []
-      if 'CSP' in properties and not properties['CSP']:
+      no_csp = 'CSP' in properties and not properties['CSP']
+      if no_csp:
         exclude_list.extend(['X-WebKit-CSP'])
       else:
-        include_list.extend(['X-WebKit-CSP'])
         exclude_list.extend(['<script>', 'onclick=', 'onload=',
                              'onchange=', 'onsubmit=', 'javascript:'])
       if 'includes' in properties:
         include_list.extend(properties['includes'])
       if 'excludes' in properties:
         exclude_list.extend(properties['exlcudes'])
       test_utils.StringContentCheck(self, self.GetTabContents(),
                                     include_list, exclude_list)
+      result = self.ExecuteJavascript("""
+          var r = 'blocked';
+          var f = 'executed';
+          var s = document.createElement('script');
+          s.textContent = 'r = f';
+          document.body.appendChild(s);
+          window.domAutomationController.send(r);
+        """)
+      logging.debug('has csp %s, result %s.' % (not no_csp, result))
+      if no_csp:
+        self.assertEqual(result, 'executed');
+      else:
+        self.assertEqual(result, 'blocked');
 
   def testAboutAppCacheTab(self):
     """Test App Cache tab to confirm about page populates caches."""
     self.NavigateToURL('about:appcache-internals')
     self._VerifyAppCacheInternals()
     self.assertEqual('AppCache Internals', self.GetActiveTabTitle())
 
   def testAboutDNSTab(self):
     """Test DNS tab to confirm DNS about page propogates records."""
     self.NavigateToURL('about:dns')
     self._VerifyAboutDNS()
     self.assertEqual('About DNS', self.GetActiveTabTitle())
 
   def testSpecialAcceratorTabs(self):
     """Test special tabs created by acclerators like IDC_SHOW_HISTORY,
        IDC_SHOW_DOWNLOADS."""
     for accel, title in self.special_accelerator_tabs.iteritems():
       self.RunCommand(accel)
       self.assertTrue(self.WaitUntil(
             self.GetActiveTabTitle, expect_retval=title),
           msg='Expected "%s"' % title)
 
 
 if __name__ == '__main__':
   pyauto_functional.Main()