Reland: service worker: Don't control a subframe of an insecure context

third_party/WebKit/Source/web/tests/WebFrameTest.cpp

 /*
  * Copyright (C) 2010 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 8626 matching lines @@
 
     WebLocalFrame* mainFrame = helper.webView()->mainFrame()->toWebLocalFrame();
     v8::HandleScope scope(v8::Isolate::GetCurrent());
     mainFrame->executeScript(WebScriptSource("hello = 'world';"));
     FrameTestHelpers::loadFrame(mainFrame, "data:text/html,new page");
     v8::Local<v8::Value> result = mainFrame->executeScriptAndReturnValue(WebScriptSource("hello"));
     ASSERT_TRUE(result->IsString());
     EXPECT_EQ("world", toCoreString(result->ToString(mainFrame->mainWorldScriptContext()).ToLocalChecked()));
 }
 
+static void setSecurityOrigin(WebFrame* frame, PassRefPtr<SecurityOrigin> securityOrigin)
+{
+    Document* document = frame->document();
+    document->setSecurityOrigin(securityOrigin);
+}
+
+TEST_F(WebFrameTest, CanHaveSecureChild)
+{
+    FrameTestHelpers::WebViewHelper helper;
+    FrameTestHelpers::TestWebFrameClient client;
+    helper.initialize(true, &client, nullptr, nullptr);
+    WebFrame* mainFrame = helper.webView()->mainFrame();
+    RefPtr<SecurityOrigin> secureOrigin = SecurityOrigin::createFromString("https://example.com");
+    RefPtr<SecurityOrigin> insecureOrigin = SecurityOrigin::createFromString("http://example.com");
+
+    // Secure frame.
+    setSecurityOrigin(mainFrame, secureOrigin);
+    ASSERT_TRUE(mainFrame->canHaveSecureChild());
+
+    // Insecure frame.
+    setSecurityOrigin(mainFrame, insecureOrigin);
+    ASSERT_FALSE(mainFrame->canHaveSecureChild());
+
+    // Create a chain of frames.
+    FrameTestHelpers::loadFrame(mainFrame, "data:text/html,<iframe></iframe>");
+    WebFrame* childFrame = mainFrame->firstChild();
+    FrameTestHelpers::loadFrame(childFrame, "data:text/html,<iframe></iframe>");
+    WebFrame* grandchildFrame = childFrame->firstChild();
+
+    // Secure -> insecure -> secure frame.
+    setSecurityOrigin(mainFrame, secureOrigin);
+    setSecurityOrigin(childFrame, insecureOrigin);
+    setSecurityOrigin(grandchildFrame, secureOrigin);
+    ASSERT_TRUE(mainFrame->canHaveSecureChild());
+    ASSERT_FALSE(childFrame->canHaveSecureChild());
+    ASSERT_FALSE(grandchildFrame->canHaveSecureChild());
+
+    // A document in an insecure context can be considered secure if it has a
+    // scheme that bypasses the secure context check. But the exception doesn't
+    // apply to children of that document's frame.
+    SchemeRegistry::registerURLSchemeBypassingSecureContextCheck("very-special-scheme");
+    SchemeRegistry::registerURLSchemeAsSecure("very-special-scheme");
+    RefPtr<SecurityOrigin> specialOrigin = SecurityOrigin::createFromString("very-special-scheme://example.com");
+
+    setSecurityOrigin(mainFrame, insecureOrigin);
+    setSecurityOrigin(childFrame, specialOrigin);
+    setSecurityOrigin(grandchildFrame, secureOrigin);
+    ASSERT_FALSE(mainFrame->canHaveSecureChild());
+    ASSERT_FALSE(childFrame->canHaveSecureChild());
+    ASSERT_FALSE(grandchildFrame->canHaveSecureChild());
+    Document* mainDocument = mainFrame->document();
+    Document* childDocument = childFrame->document();
+    Document* grandchildDocument = grandchildFrame->document();
+    ASSERT_FALSE(mainDocument->isSecureContext());
+    ASSERT_TRUE(childDocument->isSecureContext());
+    ASSERT_FALSE(grandchildDocument->isSecureContext());
+}
+
 } // namespace blink