Add scheme exceptions for isSecureContext

third_party/WebKit/Source/platform/weborigin/SecurityPolicyTest.cpp

 /*
  * Copyright (C) 2014 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 170 matching lines @@
         RefPtr<SecurityOrigin> origin2 = SecurityOrigin::createFromString(test.anotherUrlInOrigin);
 
         EXPECT_FALSE(origin1->isPotentiallyTrustworthy(errorMessage));
         EXPECT_FALSE(origin2->isPotentiallyTrustworthy(errorMessage));
         SecurityPolicy::addOriginTrustworthyWhiteList(origin1);
         EXPECT_TRUE(origin1->isPotentiallyTrustworthy(errorMessage));
         EXPECT_TRUE(origin2->isPotentiallyTrustworthy(errorMessage));
     }
 }
 
+TEST(SecurityPolicyTest, BypassSecureContextCheck)
+{
+    RefPtr<SecurityOrigin> origin1 = SecurityOrigin::createFromString("http://a.test/path/to/file.html");
+    RefPtr<SecurityOrigin> origin2 = SecurityOrigin::createFromString("https://a.test/path/to/file.html");
+    RefPtr<SecurityOrigin> origin3 = SecurityOrigin::createFromString("random-scheme://a.b/c");
+
+    EXPECT_FALSE(SecurityPolicy::shouldOriginBypassSecureContextCheck(*origin1));
+    EXPECT_FALSE(SecurityPolicy::shouldOriginBypassSecureContextCheck(*origin2));
+    EXPECT_FALSE(SecurityPolicy::shouldOriginBypassSecureContextCheck(*origin3));
+
+    SecurityPolicy::addSchemeToBypassSecureContextWhitelist("random-scheme");
+
+    EXPECT_FALSE(SecurityPolicy::shouldOriginBypassSecureContextCheck(*origin1));
+    EXPECT_FALSE(SecurityPolicy::shouldOriginBypassSecureContextCheck(*origin2));
+    EXPECT_TRUE(SecurityPolicy::shouldOriginBypassSecureContextCheck(*origin3));

[Mike West, 2015/10/06 07:22:34]

I'd like to see some tests verifying the nesting behavior. You can take a look
at `Source/web/tests/WebDocumentTest.cpp` (the firstPartyForCookies tests) for
some examples.

[jww, 2015/10/06 21:53:56]

Can you clarify what test you'd like to see for the nested behavior? Do you mean
you want tests for isSecureContext() explicitly? Or are you talking more
specifically about for extensions (which I've added)?

+}
+
 } // namespace blink