Stop supporting legacy keywords in Referrer-Policy header

third_party/WebKit/Source/core/dom/DocumentTest.cpp

 /*
  * Copyright (c) 2014, Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 166 matching lines @@
     EXPECT_EQ(link, document().linkManifest());
 }
 
 TEST_F(DocumentTest, referrerPolicyParsing)
 {
     EXPECT_EQ(ReferrerPolicyDefault, document().getReferrerPolicy());
 
     struct TestCase {
         const char* policy;
         ReferrerPolicy expected;
+        bool isLegacy;
     } tests[] = {
-        { "", ReferrerPolicyDefault },
+        { "", ReferrerPolicyDefault, false },
         // Test that invalid policy values are ignored.
-        { "not-a-real-policy", ReferrerPolicyDefault },
-        { "not-a-real-policy,also-not-a-real-policy", ReferrerPolicyDefault },
-        { "not-a-real-policy,unsafe-url", ReferrerPolicyAlways },
-        { "unsafe-url,not-a-real-policy", ReferrerPolicyAlways },
+        { "not-a-real-policy", ReferrerPolicyDefault, false },
+        { "not-a-real-policy,also-not-a-real-policy", ReferrerPolicyDefault, false },
+        { "not-a-real-policy,unsafe-url", ReferrerPolicyAlways, false },
+        { "unsafe-url,not-a-real-policy", ReferrerPolicyAlways, false },
         // Test parsing each of the policy values.
-        { "always", ReferrerPolicyAlways },
-        { "default", ReferrerPolicyNoReferrerWhenDowngrade },
-        { "never", ReferrerPolicyNever },
-        { "no-referrer", ReferrerPolicyNever },
-        { "no-referrer-when-downgrade", ReferrerPolicyNoReferrerWhenDowngrade },
-        { "origin", ReferrerPolicyOrigin },
-        { "origin-when-crossorigin", ReferrerPolicyOriginWhenCrossOrigin },
-        { "origin-when-cross-origin", ReferrerPolicyOriginWhenCrossOrigin },
+        { "always", ReferrerPolicyAlways, true },
+        { "default", ReferrerPolicyNoReferrerWhenDowngrade, true },
+        { "never", ReferrerPolicyNever, true },
+        { "no-referrer", ReferrerPolicyNever, false },
+        { "default", ReferrerPolicyNoReferrerWhenDowngrade, true },
+        { "no-referrer-when-downgrade", ReferrerPolicyNoReferrerWhenDowngrade, false },
+        { "origin", ReferrerPolicyOrigin, false },
+        { "origin-when-crossorigin", ReferrerPolicyOriginWhenCrossOrigin, true },
+        { "origin-when-cross-origin", ReferrerPolicyOriginWhenCrossOrigin, false },
         { "unsafe-url", ReferrerPolicyAlways },
     };
 
     for (auto test : tests) {
         document().setReferrerPolicy(ReferrerPolicyDefault);
-        document().parseAndSetReferrerPolicy(test.policy);
+        if (test.isLegacy) {
+            // Legacy keyword support must be explicitly enabled for the policy to parse successfully.
+            document().parseAndSetReferrerPolicy(test.policy);
+            EXPECT_EQ(ReferrerPolicyDefault, document().getReferrerPolicy());
+            document().parseAndSetReferrerPolicy(test.policy, true);
+        } else {
+            document().parseAndSetReferrerPolicy(test.policy);
+        }
         EXPECT_EQ(test.expected, document().getReferrerPolicy()) << test.policy;
     }
 }
 
 TEST_F(DocumentTest, OutgoingReferrer)
 {
     document().setURL(KURL(KURL(), "https://www.example.com/hoge#fuga?piyo"));
     document().setSecurityOrigin(SecurityOrigin::create(KURL(KURL(), "https://www.example.com/")));
     EXPECT_EQ("https://www.example.com/hoge", document().outgoingReferrer());
 }
@@ skipping 64 matching lines @@
     EXPECT_TRUE(document().getSecurityOrigin()->isPotentiallyTrustworthy());
 
     origin = SecurityOrigin::createFromString("https://example.test");
     document().setSecurityOrigin(origin);
     document().enforceSandboxFlags(mask);
     EXPECT_TRUE(document().getSecurityOrigin()->isUnique());
     EXPECT_TRUE(document().getSecurityOrigin()->isPotentiallyTrustworthy());
 }
 
 } // namespace blink