WebUI: DisallowJavascript only on Refresh and non-same-page navigations

chrome/browser/ui/webui/webui_browsertest.cc

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "base/command_line.h"
 #include "chrome/browser/ui/browser.h"
+#include "chrome/browser/ui/browser_commands.h"
 #include "chrome/browser/ui/tabs/tab_strip_model.h"
 #include "chrome/browser/ui/webui/chrome_web_ui_controller_factory.h"
 #include "chrome/common/chrome_switches.h"
 #include "chrome/common/url_constants.h"
 #include "chrome/test/base/in_process_browser_test.h"
 #include "chrome/test/base/ui_test_utils.h"
 #include "content/public/browser/child_process_security_policy.h"
 #include "content/public/browser/render_process_host.h"
+#include "content/public/browser/web_ui_message_handler.h"
 #include "content/public/common/content_switches.h"
+#include "content/public/test/browser_test_utils.h"
 #include "content/public/test/test_utils.h"
 
-using WebUIBrowserTest = InProcessBrowserTest;
+namespace {
+
+class TestWebUIMessageHandler : public content::WebUIMessageHandler {
+ public:
+  void RegisterMessages() override {}
+};
+
+}  // namespace
+
+using WebUIImplBrowserTest = InProcessBrowserTest;
 
 // Tests that navigating between WebUIs of different types results in
 // SiteInstance swap when running in process-per-tab process model.
-IN_PROC_BROWSER_TEST_F(WebUIBrowserTest, ForceSwapOnDifferenteWebUITypes) {
+IN_PROC_BROWSER_TEST_F(WebUIImplBrowserTest, ForceSwapOnDifferenteWebUITypes) {
   base::CommandLine::ForCurrentProcess()->AppendSwitch(
       switches::kProcessPerTab);
   content::WebContents* web_contents =
       browser()->tab_strip_model()->GetActiveWebContents();
 
   const GURL web_ui_url(std::string(content::kChromeUIScheme) + "://" +
                         std::string(chrome::kChromeUIFlagsHost));
   EXPECT_TRUE(ChromeWebUIControllerFactory::GetInstance()->UseWebUIForURL(
       web_contents->GetBrowserContext(), web_ui_url));
   ui_test_utils::NavigateToURL(browser(), web_ui_url);
@@ skipping 10 matching lines @@
   const GURL web_ui_url2(std::string(content::kChromeUIScheme) + "://" +
                          std::string(chrome::kChromeUIVersionHost));
   EXPECT_TRUE(ChromeWebUIControllerFactory::GetInstance()->UseWebUIForURL(
       web_contents->GetBrowserContext(), web_ui_url2));
   ui_test_utils::NavigateToURL(browser(), web_ui_url2);
   EXPECT_NE(orig_site_instance, web_contents->GetSiteInstance());
   EXPECT_TRUE(
       content::ChildProcessSecurityPolicy::GetInstance()->HasWebUIBindings(
           web_contents->GetRenderProcessHost()->GetID()));
 }
+
+IN_PROC_BROWSER_TEST_F(WebUIImplBrowserTest, InPageNavigationsAndReload) {
+  ui_test_utils::NavigateToURL(browser(), GURL(chrome::kChromeUITermsURL));
+
+  content::WebUIMessageHandler* test_handler = new TestWebUIMessageHandler;
+  browser()
+      ->tab_strip_model()
+      ->GetActiveWebContents()
+      ->GetWebUI()
+      ->AddMessageHandler(test_handler);
+  test_handler->AllowJavascriptForTesting();
+
+  // Push onto window.history. Back should now be an in-page navigation.
+  ASSERT_TRUE(content::ExecuteScript(
+      browser()->tab_strip_model()->GetActiveWebContents(),
+      "window.history.pushState({}, '', 'foo.html')"));
+  chrome::GoBack(browser(), CURRENT_TAB);
+  content::WaitForLoadStop(
+      browser()->tab_strip_model()->GetActiveWebContents());
+
+  // Test handler should still have JavaScript allowed after in-page navigation.
+  EXPECT_TRUE(test_handler->IsJavascriptAllowed());
+
+  chrome::Reload(browser(), CURRENT_TAB);
+  content::WaitForLoadStop(
+      browser()->tab_strip_model()->GetActiveWebContents());
+
+  // Verify that after a reload, the test handler has been disallowed.
+  EXPECT_FALSE(test_handler->IsJavascriptAllowed());
+}