Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(144)

Unified Diff: third_party/WebKit/Source/web/tests/WebFrameTest.cpp

Issue 1816983002: Add a setting to allow window object reuse across a top-level initial navigation. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: . Created 4 years, 9 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « third_party/WebKit/Source/web/WebSettingsImpl.cpp ('k') | third_party/WebKit/public/web/WebSettings.h » ('j') | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: third_party/WebKit/Source/web/tests/WebFrameTest.cpp
diff --git a/third_party/WebKit/Source/web/tests/WebFrameTest.cpp b/third_party/WebKit/Source/web/tests/WebFrameTest.cpp
index 835c19d3ddbc0225aa5affdaaee3c9f732a242ac..a029c70e912d12df06fba50ad514c6f3f3f9316b 100644
--- a/third_party/WebKit/Source/web/tests/WebFrameTest.cpp
+++ b/third_party/WebKit/Source/web/tests/WebFrameTest.cpp
@@ -8505,4 +8505,81 @@ TEST_F(WebFrameVisibilityChangeTest, RemoteFrameParentVisibilityChange)
EXPECT_FALSE(remoteFrameClient()->isVisible());
}
+static void enableGlobalReuseForUnownedMainFrames(WebSettings* settings)
+{
+ settings->setShouldReuseGlobalForUnownedMainFrame(true);
+}
+
+// A main frame with no opener should have a unique security origin. Thus, the
+// global should never be reused on the initial navigation.
+TEST(WebFrameGlobalReuseTest, MainFrameWithNoOpener)
+{
+ FrameTestHelpers::WebViewHelper helper;
+ helper.initialize(true);
+
+ WebLocalFrame* mainFrame = helper.webView()->mainFrame()->toWebLocalFrame();
+ v8::HandleScope scope(v8::Isolate::GetCurrent());
+ mainFrame->executeScript(WebScriptSource("hello = 'world';"));
+ FrameTestHelpers::loadFrame(mainFrame, "data:text/html,new page");
+ v8::Local<v8::Value> result = mainFrame->executeScriptAndReturnValue(WebScriptSource("hello"));
+ EXPECT_TRUE(result.IsEmpty());
+}
+
+// Child frames should never reuse the global on a cross-origin navigation, even
+// if the setting is enabled. It's not safe to since the parent could have
+// injected script before the initial navigation.
+TEST(WebFrameGlobalReuseTest, ChildFrame)
+{
+ FrameTestHelpers::WebViewHelper helper;
+ helper.initialize(true, nullptr, nullptr, enableGlobalReuseForUnownedMainFrames);
+
+ WebLocalFrame* mainFrame = helper.webView()->mainFrame()->toWebLocalFrame();
+ FrameTestHelpers::loadFrame(mainFrame, "data:text/html,<iframe></iframe>");
+
+ WebLocalFrame* childFrame = mainFrame->firstChild()->toWebLocalFrame();
+ v8::HandleScope scope(v8::Isolate::GetCurrent());
+ childFrame->executeScript(WebScriptSource("hello = 'world';"));
+ FrameTestHelpers::loadFrame(childFrame, "data:text/html,new page");
+ v8::Local<v8::Value> result = childFrame->executeScriptAndReturnValue(WebScriptSource("hello"));
+ EXPECT_TRUE(result.IsEmpty());
+}
+
+// A main frame with an opener should never reuse the global on a cross-origin
+// navigation, even if the setting is enabled. It's not safe to since the opener
+// could have injected script.
+TEST(WebFrameGlobalReuseTest, MainFrameWithOpener)
+{
+ FrameTestHelpers::TestWebViewClient openerWebViewClient;
+ FrameTestHelpers::WebViewHelper openerHelper;
+ openerHelper.initialize(false, nullptr, &openerWebViewClient);
+ FrameTestHelpers::WebViewHelper helper;
+ helper.initializeWithOpener(openerHelper.webView()->mainFrame(), true, nullptr, nullptr, enableGlobalReuseForUnownedMainFrames);
+
+ WebLocalFrame* mainFrame = helper.webView()->mainFrame()->toWebLocalFrame();
+ v8::HandleScope scope(v8::Isolate::GetCurrent());
+ mainFrame->executeScript(WebScriptSource("hello = 'world';"));
+ FrameTestHelpers::loadFrame(mainFrame, "data:text/html,new page");
+ v8::Local<v8::Value> result = mainFrame->executeScriptAndReturnValue(WebScriptSource("hello"));
+ EXPECT_TRUE(result.IsEmpty());
+}
+
+// A main frame that is unrelated to any other frame /can/ reuse the global if
+// the setting is enabled. In this case, it's impossible for any other frames to
+// have touched the global. Only the embedder could have injected script, and
+// the embedder enabling this setting is a signal that the injected script needs
+// to persist on the first navigation away from the initial empty document.
+TEST(WebFrameGlobalReuseTest, ReuseForMainFrameIfEnabled)
+{
+ FrameTestHelpers::WebViewHelper helper;
+ helper.initialize(true, nullptr, nullptr, enableGlobalReuseForUnownedMainFrames);
+
+ WebLocalFrame* mainFrame = helper.webView()->mainFrame()->toWebLocalFrame();
+ v8::HandleScope scope(v8::Isolate::GetCurrent());
+ mainFrame->executeScript(WebScriptSource("hello = 'world';"));
+ FrameTestHelpers::loadFrame(mainFrame, "data:text/html,new page");
+ v8::Local<v8::Value> result = mainFrame->executeScriptAndReturnValue(WebScriptSource("hello"));
+ ASSERT_TRUE(result->IsString());
+ EXPECT_EQ("world", toCoreString(result->ToString(mainFrame->mainWorldScriptContext()).ToLocalChecked()));
+}
+
} // namespace blink
« no previous file with comments | « third_party/WebKit/Source/web/WebSettingsImpl.cpp ('k') | third_party/WebKit/public/web/WebSettings.h » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698