The cross-origin checks in the multibuffer code are not sufficient, as they only trigger when a red…

media/blink/resource_multibuffer_data_provider_unittest.cc

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "media/blink/resource_multibuffer_data_provider.h"
 
 #include <stdint.h>
 #include <algorithm>
 #include <string>
 #include <utility>
@@ skipping 236 matching lines @@
 TEST_F(ResourceMultiBufferDataProviderTest, BadHttpResponse) {
   Initialize(kHttpUrl, 0);
   Start();
 
   EXPECT_CALL(*this, RedirectCallback(scoped_refptr<UrlData>(nullptr)));
 
   WebURLResponse response(gurl_);
   response.setHTTPStatusCode(404);
   response.setHTTPStatusText("Not Found\n");
   loader_->didReceiveResponse(url_loader_, response);
-  StopWhenLoad();
 }
 
 // Tests that partial content is requested but not fulfilled.
 TEST_F(ResourceMultiBufferDataProviderTest, NotPartialResponse) {
   Initialize(kHttpUrl, 100);
   Start();
   FullResponse(1024, false);
-  StopWhenLoad();
 }
 
 // Tests that a 200 response is received.
 TEST_F(ResourceMultiBufferDataProviderTest, FullResponse) {
   Initialize(kHttpUrl, 0);
   Start();
   FullResponse(1024);
   StopWhenLoad();
 }
 
@@ skipping 36 matching lines @@
 
   WebURLResponse response(gurl_);
   response.setHTTPHeaderField(
       WebString::fromUTF8("Content-Range"),
       WebString::fromUTF8(base::StringPrintf("bytes "
                                              "%d-%d/%d",
                                              1, 10, 1024)));
   response.setExpectedContentLength(10);
   response.setHTTPStatusCode(kHttpPartialContent);
   loader_->didReceiveResponse(url_loader_, response);
-  StopWhenLoad();
 }
 
 TEST_F(ResourceMultiBufferDataProviderTest, TestRedirects) {
   // Test redirect.
   Initialize(kHttpUrl, 0);
   Start();
   Redirect(kHttpRedirect);
   FullResponse(1024);
   StopWhenLoad();
 }
 
 }  // namespace media