| OLD | NEW |
| 1 // Copyright 2015 The Chromium Authors. All rights reserved. | 1 // Copyright 2015 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "core/frame/csp/CSPSourceList.h" | 5 #include "core/frame/csp/CSPSourceList.h" |
| 6 | 6 |
| 7 #include "core/dom/Document.h" | 7 #include "core/dom/Document.h" |
| 8 #include "core/frame/csp/CSPSource.h" | 8 #include "core/frame/csp/CSPSource.h" |
| 9 #include "core/frame/csp/ContentSecurityPolicy.h" | 9 #include "core/frame/csp/ContentSecurityPolicy.h" |
| 10 #include "platform/network/ResourceRequest.h" | 10 #include "platform/network/ResourceRequest.h" |
| (...skipping 36 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 47 { | 47 { |
| 48 KURL base; | 48 KURL base; |
| 49 String sources = "'none'"; | 49 String sources = "'none'"; |
| 50 CSPSourceList sourceList(csp.get(), "script-src"); | 50 CSPSourceList sourceList(csp.get(), "script-src"); |
| 51 parseSourceList(sourceList, sources); | 51 parseSourceList(sourceList, sources); |
| 52 | 52 |
| 53 EXPECT_FALSE(sourceList.matches(KURL(base, "http://example.com/"))); | 53 EXPECT_FALSE(sourceList.matches(KURL(base, "http://example.com/"))); |
| 54 EXPECT_FALSE(sourceList.matches(KURL(base, "https://example.test/"))); | 54 EXPECT_FALSE(sourceList.matches(KURL(base, "https://example.test/"))); |
| 55 } | 55 } |
| 56 | 56 |
| 57 TEST_F(CSPSourceListTest, BasicMatchingUnsafeDynamic) | 57 TEST_F(CSPSourceListTest, BasicMatchingStrictDynamic) |
| 58 { | 58 { |
| 59 String sources = "'unsafe-dynamic'"; | 59 String sources = "'strict-dynamic'"; |
| 60 CSPSourceList sourceList(csp.get(), "script-src"); | 60 CSPSourceList sourceList(csp.get(), "script-src"); |
| 61 parseSourceList(sourceList, sources); | 61 parseSourceList(sourceList, sources); |
| 62 | 62 |
| 63 EXPECT_TRUE(sourceList.allowDynamic()); | 63 EXPECT_TRUE(sourceList.allowDynamic()); |
| 64 } | 64 } |
| 65 | 65 |
| 66 TEST_F(CSPSourceListTest, BasicMatchingUnsafeHashedAttributes) | 66 TEST_F(CSPSourceListTest, BasicMatchingUnsafeHashedAttributes) |
| 67 { | 67 { |
| 68 String sources = "'unsafe-hashed-attributes'"; | 68 String sources = "'unsafe-hashed-attributes'"; |
| 69 CSPSourceList sourceList(csp.get(), "script-src"); | 69 CSPSourceList sourceList(csp.get(), "script-src"); |
| (...skipping 122 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 192 EXPECT_TRUE(sourceList.matches(KURL(base, "http://example1.com/bar/"), Resou
rceRequest::RedirectStatus::FollowedRedirect)); | 192 EXPECT_TRUE(sourceList.matches(KURL(base, "http://example1.com/bar/"), Resou
rceRequest::RedirectStatus::FollowedRedirect)); |
| 193 EXPECT_TRUE(sourceList.matches(KURL(base, "http://example2.com/bar/"), Resou
rceRequest::RedirectStatus::FollowedRedirect)); | 193 EXPECT_TRUE(sourceList.matches(KURL(base, "http://example2.com/bar/"), Resou
rceRequest::RedirectStatus::FollowedRedirect)); |
| 194 EXPECT_TRUE(sourceList.matches(KURL(base, "http://example2.com/foo/"), Resou
rceRequest::RedirectStatus::FollowedRedirect)); | 194 EXPECT_TRUE(sourceList.matches(KURL(base, "http://example2.com/foo/"), Resou
rceRequest::RedirectStatus::FollowedRedirect)); |
| 195 EXPECT_TRUE(sourceList.matches(KURL(base, "https://example1.com/foo/"), Reso
urceRequest::RedirectStatus::FollowedRedirect)); | 195 EXPECT_TRUE(sourceList.matches(KURL(base, "https://example1.com/foo/"), Reso
urceRequest::RedirectStatus::FollowedRedirect)); |
| 196 EXPECT_TRUE(sourceList.matches(KURL(base, "https://example1.com/bar/"), Reso
urceRequest::RedirectStatus::FollowedRedirect)); | 196 EXPECT_TRUE(sourceList.matches(KURL(base, "https://example1.com/bar/"), Reso
urceRequest::RedirectStatus::FollowedRedirect)); |
| 197 | 197 |
| 198 EXPECT_FALSE(sourceList.matches(KURL(base, "http://example3.com/foo/"), Reso
urceRequest::RedirectStatus::FollowedRedirect)); | 198 EXPECT_FALSE(sourceList.matches(KURL(base, "http://example3.com/foo/"), Reso
urceRequest::RedirectStatus::FollowedRedirect)); |
| 199 } | 199 } |
| 200 | 200 |
| 201 } // namespace blink | 201 } // namespace blink |
| OLD | NEW |