Add scheme exceptions for isSecureContext

third_party/WebKit/Source/platform/weborigin/SecurityPolicyTest.cpp

 /*
  * Copyright (C) 2014 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 170 matching lines @@
         RefPtr<SecurityOrigin> origin2 = SecurityOrigin::createFromString(test.anotherUrlInOrigin);
 
         EXPECT_FALSE(origin1->isPotentiallyTrustworthy(errorMessage));
         EXPECT_FALSE(origin2->isPotentiallyTrustworthy(errorMessage));
         SecurityPolicy::addOriginTrustworthyWhiteList(origin1);
         EXPECT_TRUE(origin1->isPotentiallyTrustworthy(errorMessage));
         EXPECT_TRUE(origin2->isPotentiallyTrustworthy(errorMessage));
     }
 }
 
+TEST(SecurityPolicyTest, BypassSecureContextCheck)
+{
+    RefPtr<SecurityOrigin> origin1 = SecurityOrigin::createFromString("http://a.test/path/to/file.html");
+    RefPtr<SecurityOrigin> origin2 = SecurityOrigin::createFromString("https://a.test/path/to/file.html");
+    RefPtr<SecurityOrigin> origin3 = SecurityOrigin::createFromString("random-scheme://a.b/c");
+
+    EXPECT_FALSE(SecurityPolicy::shouldOriginBypassSecureContextCheck(*origin1));
+    EXPECT_FALSE(SecurityPolicy::shouldOriginBypassSecureContextCheck(*origin2));
+    EXPECT_FALSE(SecurityPolicy::shouldOriginBypassSecureContextCheck(*origin3));
+
+    SecurityPolicy::addSchemeToBypassSecureContextWhitelist("random-scheme");
+
+    EXPECT_FALSE(SecurityPolicy::shouldOriginBypassSecureContextCheck(*origin1));
+    EXPECT_FALSE(SecurityPolicy::shouldOriginBypassSecureContextCheck(*origin2));
+    EXPECT_TRUE(SecurityPolicy::shouldOriginBypassSecureContextCheck(*origin3));
+}
+
 } // namespace blink