Do not trigger CrossSiteResourceHandler for streams or user certs.

chrome/browser/extensions/api/streams_private/streams_private_apitest.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "base/command_line.h"
 #include "base/message_loop/message_loop.h"
 #include "base/prefs/pref_service.h"
 #include "chrome/browser/download/download_prefs.h"
 #include "chrome/browser/extensions/extension_apitest.h"
 #include "chrome/browser/profiles/profile.h"
 #include "chrome/browser/ui/browser.h"
 #include "chrome/browser/ui/tabs/tab_strip_model.h"
 #include "chrome/common/extensions/mime_types_handler.h"
 #include "chrome/common/pref_names.h"
 #include "chrome/test/base/test_switches.h"
 #include "chrome/test/base/ui_test_utils.h"
 #include "content/public/browser/download_item.h"
 #include "content/public/browser/download_manager.h"
 #include "content/public/browser/render_process_host.h"
 #include "content/public/browser/resource_controller.h"
 #include "content/public/browser/web_contents.h"
 #include "content/public/test/download_test_observer.h"
 #include "extensions/browser/event_router.h"
 #include "extensions/browser/extension_system.h"
+#include "net/dns/mock_host_resolver.h"
 #include "net/test/embedded_test_server/embedded_test_server.h"
 #include "net/test/embedded_test_server/http_request.h"
 #include "net/test/embedded_test_server/http_response.h"
 #include "testing/gmock/include/gmock/gmock.h"
 
 using content::BrowserContext;
 using content::BrowserThread;
 using content::DownloadItem;
 using content::DownloadManager;
 using content::DownloadUrlParameters;
@@ skipping 15 matching lines @@
   scoped_ptr<BasicHttpResponse> response(new BasicHttpResponse());
 
   // For relative path "/doc_path.doc", return success response with MIME type
   // "application/msword".
   if (request.relative_url == "/doc_path.doc") {
     response->set_code(net::HTTP_OK);
     response->set_content_type("application/msword");
     return response.PassAs<HttpResponse>();
   }
 
-  // For relative path "/test_path_attch.txt", return success response with
+  // For relative path "/text_path_attch.txt", return success response with
   // MIME type "plain/text" and content "txt content". Also, set content
   // disposition to be attachment.
   if (request.relative_url == "/text_path_attch.txt") {
     response->set_code(net::HTTP_OK);
     response->set_content("txt content");
     response->set_content_type("plain/text");
     response->AddCustomHeader("Content-Disposition",
                               "attachment; filename=test_path.txt");
     return response.PassAs<HttpResponse>();
   }
+
   // For relative path "/test_path_attch.txt", return success response with
   // MIME type "plain/text" and content "txt content".
   if (request.relative_url == "/text_path.txt") {
     response->set_code(net::HTTP_OK);
     response->set_content("txt content");
     response->set_content_type("plain/text");
     return response.PassAs<HttpResponse>();
   }
 
+  // A random HTML file to navigate to.
+  if (request.relative_url == "/index.html") {
+    response->set_code(net::HTTP_OK);
+    response->set_content("html content");
+    response->set_content_type("text/html");
+    return response.PassAs<HttpResponse>();
+  }
+
+  // Respond to /favicon.ico for navigating to the page.
+  if (request.relative_url == "/favicon.ico") {
+    response->set_code(net::HTTP_NOT_FOUND);
+    return response.PassAs<HttpResponse>();
+  }
+
   // No other requests should be handled in the tests.
   EXPECT_TRUE(false) << "NOTREACHED!";
   response->set_code(net::HTTP_NOT_FOUND);
   return response.PassAs<HttpResponse>();
 }
 
 // Tests to verify that resources are correctly intercepted by
 // StreamsResourceThrottle.
 // The test extension expects the resources that should be handed to the
 // extension to have MIME type 'application/msword' and the resources that
@@ skipping 131 matching lines @@
   DownloadManager* download_manager = GetDownloadManager();
   std::vector<DownloadItem*> downloads;
   download_manager->GetAllDownloads(&downloads);
   ASSERT_EQ(0u, downloads.size());
 
   // The test extension should receive onExecuteContentHandler event with MIME
   // type 'application/msword' (and call chrome.test.notifySuccess).
   EXPECT_TRUE(catcher.GetNextResult());
 }
 
+// Tests that navigating cross-site to a resource with a MIME type handleable by
+// an installed, white-listed extension invokes the extension's
+// onExecuteContentHandler event (and does not start a download).
+// Regression test for http://crbug.com/342999.
+IN_PROC_BROWSER_TEST_F(StreamsPrivateApiTest, NavigateCrossSite) {
+#if defined(OS_WIN) && defined(USE_ASH)
+  // Disable this test in Metro+Ash for now (http://crbug.com/262796).
+  if (CommandLine::ForCurrentProcess()->HasSwitch(switches::kAshBrowserTests))
+    return;
+#endif
+
+  ASSERT_TRUE(LoadTestExtension()) << message_;
+
+  ResultCatcher catcher;
+
+  // Navigate to a URL on a different hostname.
+  std::string initial_host = "www.example.com";
+  host_resolver()->AddRule(initial_host, "127.0.0.1");
+  GURL::Replacements replacements;
+  replacements.SetHostStr(initial_host);
+  GURL initial_url =
+      test_server_->GetURL("/index.html").ReplaceComponents(replacements);
+  ui_test_utils::NavigateToURL(browser(), initial_url);
+
+  // Now navigate to the doc file; the extension should pick it up normally.
+  ui_test_utils::NavigateToURL(browser(),
+                               test_server_->GetURL("/doc_path.doc"));
+
+  // Wait for the response from the test server.
+  base::MessageLoop::current()->RunUntilIdle();
+
+  // There should be no downloads started by the navigation.
+  DownloadManager* download_manager = GetDownloadManager();
+  std::vector<DownloadItem*> downloads;
+  download_manager->GetAllDownloads(&downloads);
+  ASSERT_EQ(0u, downloads.size());
+
+  // The test extension should receive onExecuteContentHandler event with MIME
+  // type 'application/msword' (and call chrome.test.notifySuccess).
+  EXPECT_TRUE(catcher.GetNextResult());
+}
+
 // Tests that navigation to an attachment starts a download, even if there is an
 // extension with a file browser handler that can handle the attachment's MIME
 // type.
 IN_PROC_BROWSER_TEST_F(StreamsPrivateApiTest, NavigateToAnAttachment) {
   InitializeDownloadSettings();
 
   ASSERT_TRUE(LoadTestExtension()) << message_;
 
   ResultCatcher catcher;
 
-  // The test should start a downloadm.
+  // The test should start a download.
   DownloadManager* download_manager = GetDownloadManager();
   scoped_ptr<content::DownloadTestObserver> download_observer(
       new content::DownloadTestObserverInProgress(download_manager, 1));
 
   ui_test_utils::NavigateToURL(browser(),
                                test_server_->GetURL("/text_path_attch.txt"));
 
   // Wait for the download to start.
   download_observer->WaitForFinished();
 
@@ skipping 60 matching lines @@
   // The test extension should not receive any events by now. Send it an event
   // with MIME type "test/done", so it stops waiting for the events. (If there
   // was an event with MIME type 'plain/text', |catcher.GetNextResult()| will
   // fail regardless of the sent event; chrome.test.notifySuccess will not be
   // called by the extension).
   SendDoneEvent();
   EXPECT_TRUE(catcher.GetNextResult());
 }
 
 }  // namespace