Add scheme exceptions for isSecureContext

third_party/WebKit/Source/platform/weborigin/SecurityPolicyTest.cpp

Index: third_party/WebKit/Source/platform/weborigin/SecurityPolicyTest.cpp
diff --git a/third_party/WebKit/Source/platform/weborigin/SecurityPolicyTest.cpp b/third_party/WebKit/Source/platform/weborigin/SecurityPolicyTest.cpp
index fbd6a720dadb34362ac1fba52218edc2d802d778..90340d7b4d9053c39f2a22a4f34ba7652dcb6065 100644
--- a/third_party/WebKit/Source/platform/weborigin/SecurityPolicyTest.cpp
+++ b/third_party/WebKit/Source/platform/weborigin/SecurityPolicyTest.cpp
@@ -188,4 +188,21 @@ TEST(SecurityPolicyTest, TrustworthyWhiteList)
     }
 }
 
+TEST(SecurityPolicyTest, BypassSecureContextCheck)
+{
+    RefPtr<SecurityOrigin> origin1 = SecurityOrigin::createFromString("http://a.test/path/to/file.html");
+    RefPtr<SecurityOrigin> origin2 = SecurityOrigin::createFromString("https://a.test/path/to/file.html");
+    RefPtr<SecurityOrigin> origin3 = SecurityOrigin::createFromString("random-scheme://a.b/c");
+
+    EXPECT_FALSE(SecurityPolicy::shouldOriginBypassSecureContextCheck(*origin1));
+    EXPECT_FALSE(SecurityPolicy::shouldOriginBypassSecureContextCheck(*origin2));
+    EXPECT_FALSE(SecurityPolicy::shouldOriginBypassSecureContextCheck(*origin3));
+
+    SecurityPolicy::addSchemeToBypassSecureContextWhitelist("random-scheme");
+
+    EXPECT_FALSE(SecurityPolicy::shouldOriginBypassSecureContextCheck(*origin1));
+    EXPECT_FALSE(SecurityPolicy::shouldOriginBypassSecureContextCheck(*origin2));
+    EXPECT_TRUE(SecurityPolicy::shouldOriginBypassSecureContextCheck(*origin3));

[Mike West, 2015/10/06 07:22:34]

I'd like to see some tests verifying the nesting behavior. You can take a look
at `Source/web/tests/WebDocumentTest.cpp` (the firstPartyForCookies tests) for
some examples.

[jww, 2015/10/06 21:53:56]

Can you clarify what test you'd like to see for the nested behavior? Do you mean
you want tests for isSecureContext() explicitly? Or are you talking more
specifically about for extensions (which I've added)?

+}
+
 } // namespace blink