WIP: Move 'X-Frame-Options' checking to the browser.

content/browser/frame_host/xfo_throttle_unittest.cc

+// Copyright 2015 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "base/bind.h"
+#include "base/bind_helpers.h"
+#include "base/memory/scoped_ptr.h"
+#include "base/strings/stringprintf.h"
+#include "content/browser/frame_host/xfo_throttle.h"
+#include "content/public/browser/navigation_handle.h"
+#include "content/public/browser/navigation_throttle.h"
+#include "content/public/browser/web_contents.h"
+#include "content/public/test/test_renderer_host.h"
+#include "net/http/http_response_headers.h"
+#include "testing/gmock/include/gmock/gmock.h"
+#include "testing/gtest/include/gtest/gtest.h"
+
+namespace content {
+
+namespace {
+
+net::HttpResponseHeaders* GetXFOHeader(const char* test) {
+  std::string header_string("HTTP/1.1 200 OK\nX-Frame-Options: ");
+  header_string += test;
+  header_string += "\n\n";
+  std::replace(header_string.begin(), header_string.end(), '\n', '\0');
+  net::HttpResponseHeaders* headers =
+      new net::HttpResponseHeaders(header_string);
+  EXPECT_TRUE(headers->HasHeader("X-Frame-Options"));
+  return headers;
+}
+};
+
+// XFOThrottleTest -------------------------------------------------------------
+
+using XFOThrottleTest = testing::Test;
+
+TEST_F(XFOThrottleTest, Parsing) {
+  struct TestCase {
+    const char* header;
+    XFOThrottle::HeaderDisposition expected;
+  } cases[] = {
+      // Basic keywords
+      {"DENY", XFOThrottle::DENY},
+      {"SAMEORIGIN", XFOThrottle::SAMEORIGIN},
+      {"ALLOWALL", XFOThrottle::ALLOWALL},
+
+      // Repeated keywords
+      {"DENY,DENY", XFOThrottle::DENY},
+      {"SAMEORIGIN,SAMEORIGIN", XFOThrottle::SAMEORIGIN},
+      {"ALLOWALL,ALLOWALL", XFOThrottle::ALLOWALL},
+
+      // Case-insensitive
+      {"deNy", XFOThrottle::DENY},
+      {"sAmEorIgIn", XFOThrottle::SAMEORIGIN},
+      {"AlLOWaLL", XFOThrottle::ALLOWALL},
+
+      // Trim whitespace
+      {" DENY", XFOThrottle::DENY},
+      {"SAMEORIGIN ", XFOThrottle::SAMEORIGIN},
+      {" ALLOWALL ", XFOThrottle::ALLOWALL},
+      {"   DENY", XFOThrottle::DENY},
+      {"SAMEORIGIN   ", XFOThrottle::SAMEORIGIN},
+      {"   ALLOWALL   ", XFOThrottle::ALLOWALL},
+      {" DENY , DENY ", XFOThrottle::DENY},
+      {"SAMEORIGIN,  SAMEORIGIN", XFOThrottle::SAMEORIGIN},
+      {"ALLOWALL  ,ALLOWALL", XFOThrottle::ALLOWALL},
+  };
+
+  for (const auto& test : cases) {
+    SCOPED_TRACE(test.header);
+    scoped_refptr<net::HttpResponseHeaders> headers = GetXFOHeader(test.header);
+    std::string failed_parse;
+    EXPECT_EQ(test.expected,
+              XFOThrottle::ParseHeader(headers.get(), &failed_parse));
+    EXPECT_TRUE(failed_parse.empty());
+  }
+}
+
+TEST_F(XFOThrottleTest, ParseErrors) {
+  struct TestCase {
+    const char* header;
+    XFOThrottle::HeaderDisposition expected;
+    const char* failure;
+  } cases[] = {// Empty == Invalid.
+               {"", XFOThrottle::INVALID, ""},
+
+               // Invalid
+               {"INVALID", XFOThrottle::INVALID, "INVALID"},
+               {"INVALID DENY", XFOThrottle::INVALID, "INVALID DENY"},
+               {"DENY DENY", XFOThrottle::INVALID, "DENY DENY"},
+               {"DE NY", XFOThrottle::INVALID, "DE NY"},
+               {"INVALID,DENY", XFOThrottle::INVALID, "INVALID"},
+
+               // Conflicts
+               {"DENY,ALLOWALL", XFOThrottle::CONFLICT, "ALLOWALL"},
+               {"SAMEORIGIN,DENY", XFOThrottle::CONFLICT, "DENY"},
+               {"ALLOWALL,SAMEORIGIN", XFOThrottle::CONFLICT, "SAMEORIGIN"},
+               {"DENY,  SAMEORIGIN", XFOThrottle::CONFLICT, "SAMEORIGIN"}};
+
+  for (const auto& test : cases) {
+    SCOPED_TRACE(test.header);
+    scoped_refptr<net::HttpResponseHeaders> headers = GetXFOHeader(test.header);
+    std::string failed_parse;
+    EXPECT_EQ(test.expected,
+              XFOThrottle::ParseHeader(headers.get(), &failed_parse));
+    EXPECT_EQ(test.failure, failed_parse);
+  }
+}
+
+}  // namespace content