Implement DelegationTracker for tracking delegated permissions to RenderFrameHosts

chrome/browser/permissions/delegation_tracker_unittest.cc

+// Copyright 2016 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "chrome/browser/permissions/delegation_tracker.h"
+
+#include "chrome/test/base/chrome_render_view_host_test_harness.h"
+#include "content/public/browser/permission_type.h"
+#include "content/public/browser/render_frame_host.h"
+#include "content/public/browser/web_contents.h"
+#include "content/public/test/test_renderer_host.h"
+#include "testing/gtest/include/gtest/gtest.h"
+#include "url/gurl.h"
+
+using content::PermissionType;
+
+const char* kOrigin1 = "https://google.com";
+const char* kOrigin2 = "https://maps.google.com";
+const char* kOrigin3 = "https://example.com";
+const char* kUniqueOrigin = "about:blank";
+
+class DelegationTrackerTest : public ChromeRenderViewHostTestHarness {
+ protected:
+  content::RenderFrameHost* GetMainRFH(const char* origin) {
+    content::RenderFrameHost* result = web_contents()->GetMainFrame();
+    content::RenderFrameHostTester::For(result)
+        ->InitializeRenderFrameIfNeeded();
+    content::RenderFrameHostTester::For(result)->SimulateNavigationCommit(
+        GURL(origin));
+    return result;
+  }
+
+  content::RenderFrameHost* AddChildRFH(content::RenderFrameHost* parent,
+                                        const char* origin) {
+    content::RenderFrameHost* result =
+        content::RenderFrameHostTester::For(parent)->AppendChild("");
+    content::RenderFrameHostTester::For(result)
+        ->InitializeRenderFrameIfNeeded();
+    content::RenderFrameHostTester::For(result)->SimulateNavigationCommit(
+        GURL(origin));
+    return result;
+  }
+};
+
+TEST_F(DelegationTrackerTest, SingleFrame) {
+  DelegationTracker tracker;
+  content::RenderFrameHost* parent = GetMainRFH(kOrigin1);
+
+  EXPECT_TRUE(tracker.IsGranted(parent, PermissionType::GEOLOCATION));
+}
+
+TEST_F(DelegationTrackerTest, SingleAncestorSameOrigin) {
+  DelegationTracker tracker;
+  content::RenderFrameHost* parent = GetMainRFH(kOrigin1);
+  content::RenderFrameHost* child = AddChildRFH(parent, kOrigin1);
+
+  EXPECT_TRUE(tracker.IsGranted(parent, PermissionType::GEOLOCATION));
+  EXPECT_TRUE(tracker.IsGranted(child, PermissionType::GEOLOCATION));
+}
+
+TEST_F(DelegationTrackerTest, SingleAncestorNoDelegation) {
+  DelegationTracker tracker;
+  content::RenderFrameHost* parent = GetMainRFH(kOrigin1);
+  content::RenderFrameHost* child = AddChildRFH(parent, kOrigin2);
+
+  EXPECT_TRUE(tracker.IsGranted(parent, PermissionType::GEOLOCATION));
+  EXPECT_FALSE(tracker.IsGranted(child, PermissionType::GEOLOCATION));
+}
+
+TEST_F(DelegationTrackerTest, SingleAncestorPermissionDelegated) {
+  DelegationTracker tracker;
+  content::RenderFrameHost* parent = GetMainRFH(kOrigin1);
+  content::RenderFrameHost* child = AddChildRFH(parent, kOrigin2);
+
+  tracker.SetDelegatedPermissions(child, {PermissionType::GEOLOCATION});
+
+  EXPECT_TRUE(tracker.IsGranted(parent, PermissionType::GEOLOCATION));
+  EXPECT_TRUE(tracker.IsGranted(child, PermissionType::GEOLOCATION));
+  EXPECT_FALSE(tracker.IsGranted(child, PermissionType::NOTIFICATIONS));
+}
+
+TEST_F(DelegationTrackerTest, SingleAncestorMultiplePermissionsDelegated) {
+  DelegationTracker tracker;
+  content::RenderFrameHost* parent = GetMainRFH(kOrigin1);
+  content::RenderFrameHost* child = AddChildRFH(parent, kOrigin2);
+
+  tracker.SetDelegatedPermissions(
+      child, {PermissionType::GEOLOCATION, PermissionType::NOTIFICATIONS});
+
+  EXPECT_TRUE(tracker.IsGranted(child, PermissionType::GEOLOCATION));
+  EXPECT_TRUE(tracker.IsGranted(child, PermissionType::NOTIFICATIONS));
+}
+
+TEST_F(DelegationTrackerTest, SingleAncestorMultipleChildren) {
+  DelegationTracker tracker;
+  content::RenderFrameHost* parent = GetMainRFH(kOrigin1);
+  content::RenderFrameHost* child1 = AddChildRFH(parent, kOrigin2);
+  content::RenderFrameHost* child2 = AddChildRFH(parent, kOrigin2);
+
+  tracker.SetDelegatedPermissions(child1, {PermissionType::GEOLOCATION});
+
+  EXPECT_TRUE(tracker.IsGranted(child1, PermissionType::GEOLOCATION));
+  EXPECT_FALSE(tracker.IsGranted(child2, PermissionType::GEOLOCATION));
+}
+
+TEST_F(DelegationTrackerTest, MultipleAncestorsNotDelegated) {
+  DelegationTracker tracker;
+  content::RenderFrameHost* grandparent = GetMainRFH(kOrigin1);
+  content::RenderFrameHost* parent = AddChildRFH(grandparent, kOrigin2);
+  content::RenderFrameHost* child1 = AddChildRFH(parent, kOrigin3);
+  content::RenderFrameHost* child2 = AddChildRFH(parent, kOrigin3);
+
+  tracker.SetDelegatedPermissions(child1, {PermissionType::GEOLOCATION});
+
+  EXPECT_FALSE(tracker.IsGranted(parent, PermissionType::GEOLOCATION));
+  EXPECT_FALSE(tracker.IsGranted(child1, PermissionType::GEOLOCATION));
+  EXPECT_FALSE(tracker.IsGranted(child2, PermissionType::GEOLOCATION));
+}
+
+TEST_F(DelegationTrackerTest, MultipleAncestorsDelegated) {
+  DelegationTracker tracker;
+  content::RenderFrameHost* grandparent = GetMainRFH(kOrigin1);
+  content::RenderFrameHost* parent = AddChildRFH(grandparent, kOrigin2);
+  content::RenderFrameHost* child1 = AddChildRFH(parent, kOrigin3);
+  content::RenderFrameHost* child2 = AddChildRFH(parent, kOrigin3);
+
+  tracker.SetDelegatedPermissions(parent, {PermissionType::GEOLOCATION});
+  tracker.SetDelegatedPermissions(child1, {PermissionType::GEOLOCATION});
+
+  EXPECT_TRUE(tracker.IsGranted(parent, PermissionType::GEOLOCATION));
+  EXPECT_TRUE(tracker.IsGranted(child1, PermissionType::GEOLOCATION));
+  EXPECT_FALSE(tracker.IsGranted(child2, PermissionType::GEOLOCATION));
+}
+
+TEST_F(DelegationTrackerTest, MultipleAncestorsSameOrigin) {
+  DelegationTracker tracker;
+  content::RenderFrameHost* grandparent = GetMainRFH(kOrigin1);
+  content::RenderFrameHost* parent = AddChildRFH(grandparent, kOrigin1);
+  content::RenderFrameHost* child1 = AddChildRFH(parent, kOrigin1);
+  content::RenderFrameHost* child2 = AddChildRFH(parent, kOrigin1);
+
+  tracker.SetDelegatedPermissions(parent, {PermissionType::GEOLOCATION});
+  tracker.SetDelegatedPermissions(child1, {PermissionType::GEOLOCATION});
+
+  EXPECT_TRUE(tracker.IsGranted(parent, PermissionType::GEOLOCATION));
+  EXPECT_TRUE(tracker.IsGranted(child1, PermissionType::GEOLOCATION));
+  EXPECT_TRUE(tracker.IsGranted(child2, PermissionType::GEOLOCATION));
+}
+
+TEST_F(DelegationTrackerTest, MultipleAncestorsComplexSinglePermission) {
+  DelegationTracker tracker;
+  content::RenderFrameHost* great_grandparent = GetMainRFH(kOrigin1);
+  content::RenderFrameHost* grandparent =
+      AddChildRFH(great_grandparent, kOrigin2);
+  content::RenderFrameHost* parent1 = AddChildRFH(grandparent, kOrigin2);
+  content::RenderFrameHost* parent2 = AddChildRFH(grandparent, kOrigin3);
+  content::RenderFrameHost* child = AddChildRFH(parent1, kOrigin3);
+
+  tracker.SetDelegatedPermissions(grandparent, {PermissionType::GEOLOCATION});
+  tracker.SetDelegatedPermissions(child, {PermissionType::GEOLOCATION});
+
+  EXPECT_TRUE(tracker.IsGranted(grandparent, PermissionType::GEOLOCATION));
+  EXPECT_TRUE(tracker.IsGranted(parent1, PermissionType::GEOLOCATION));
+  EXPECT_FALSE(tracker.IsGranted(parent2, PermissionType::GEOLOCATION));
+  EXPECT_TRUE(tracker.IsGranted(child, PermissionType::GEOLOCATION));
+}
+
+TEST_F(DelegationTrackerTest, MultipleAncestorsComplexMultiplePermissions) {
+  DelegationTracker tracker;
+  content::RenderFrameHost* great_grandparent = GetMainRFH(kOrigin1);
+  content::RenderFrameHost* grandparent =
+      AddChildRFH(great_grandparent, kOrigin2);
+  content::RenderFrameHost* parent1 = AddChildRFH(grandparent, kOrigin2);
+  content::RenderFrameHost* parent2 = AddChildRFH(grandparent, kOrigin3);
+  content::RenderFrameHost* child = AddChildRFH(parent1, kOrigin3);
+
+  tracker.SetDelegatedPermissions(grandparent, {PermissionType::GEOLOCATION,
+                                                PermissionType::NOTIFICATIONS});
+  tracker.SetDelegatedPermissions(child, {PermissionType::GEOLOCATION});
+
+  EXPECT_TRUE(tracker.IsGranted(grandparent, PermissionType::GEOLOCATION));
+  EXPECT_TRUE(tracker.IsGranted(grandparent, PermissionType::NOTIFICATIONS));
+
+  EXPECT_TRUE(tracker.IsGranted(parent1, PermissionType::GEOLOCATION));
+  EXPECT_TRUE(tracker.IsGranted(parent1, PermissionType::NOTIFICATIONS));
+
+  EXPECT_FALSE(tracker.IsGranted(parent2, PermissionType::GEOLOCATION));
+  EXPECT_FALSE(tracker.IsGranted(parent2, PermissionType::NOTIFICATIONS));
+
+  EXPECT_TRUE(tracker.IsGranted(child, PermissionType::GEOLOCATION));
+  EXPECT_FALSE(tracker.IsGranted(child, PermissionType::NOTIFICATIONS));
+}
+
+TEST_F(DelegationTrackerTest, RenderFrameHostChanged) {
+  DelegationTracker tracker;
+  content::RenderFrameHost* grandparent = GetMainRFH(kOrigin1);
+  content::RenderFrameHost* parent = AddChildRFH(grandparent, kOrigin2);
+  content::RenderFrameHost* child = AddChildRFH(parent, kOrigin3);
+
+  tracker.SetDelegatedPermissions(parent, {PermissionType::GEOLOCATION});
+  tracker.SetDelegatedPermissions(child, {PermissionType::GEOLOCATION});
+
+  EXPECT_TRUE(tracker.IsGranted(parent, PermissionType::GEOLOCATION));
+  EXPECT_TRUE(tracker.IsGranted(child, PermissionType::GEOLOCATION));
+
+  content::RenderFrameHostTester::For(parent)->SimulateNavigationCommit(
+      GURL(kUniqueOrigin));
+
+  EXPECT_FALSE(tracker.IsGranted(parent, PermissionType::GEOLOCATION));
+  EXPECT_FALSE(tracker.IsGranted(child, PermissionType::GEOLOCATION));
+}
+
+TEST_F(DelegationTrackerTest, UniqueOrigins) {
+  DelegationTracker tracker;
+  content::RenderFrameHost* grandparent = GetMainRFH(kUniqueOrigin);
+  content::RenderFrameHost* parent = AddChildRFH(grandparent, kOrigin2);
+  content::RenderFrameHost* child = AddChildRFH(parent, kOrigin3);
+
+  tracker.SetDelegatedPermissions(parent, {PermissionType::GEOLOCATION});
+  tracker.SetDelegatedPermissions(child, {PermissionType::GEOLOCATION});
+
+  // Unique origins should never be able to delegate permission.
+  EXPECT_FALSE(tracker.IsGranted(parent, PermissionType::GEOLOCATION));
+  EXPECT_FALSE(tracker.IsGranted(child, PermissionType::GEOLOCATION));
+}