Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(356)

Side by Side Diff: third_party/WebKit/LayoutTests/http/tests/xmlhttprequest/xhr-to-blob-in-isolated-world.html

Issue 2399853003: [M54 merge] Lock down creation of blob:chrome-extension URLs from non-extension processes. (Closed)
Patch Set: Rebase Created 4 years, 2 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « extensions/browser/guest_view/web_view/web_view_guest.cc ('k') | no next file » | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 <body> 1 <body>
2 This tests an isolated script's ability to XHR a blob that is in its security or igin, which is not the same as the document's security origin.<br> 2 This tests an isolated script's ability to XHR a blob that is in its security or igin, which is not the same as the document's security origin.<br>
3 We pass if there are no console errors. 3 We pass if there are no console errors.
4 <script> 4 <script>
5 if (!window.testRunner) { 5 if (!window.testRunner) {
6 document.body.appendChild(document.createTextNode("This test requires window .testRunner")); 6 document.body.appendChild(document.createTextNode("This test requires window .testRunner"));
7 } else { 7 } else {
8 testRunner.dumpAsText(); 8 testRunner.dumpAsText();
9 testRunner.setIsolatedWorldSecurityOrigin(1, "chrome-extension://123"); 9 // Can't use chrome-extension:// since it's an unknown scheme and
10 testRunner.evaluateScriptInIsolatedWorld(1, "var xhr = new XMLHttpRequest(); xhr.open('GET', 'blob:chrome-extension://123/456789', false); xhr.send();"); 10 // will fail validation in content/ land; so pretend that
11 // https://cloud-cuckoo-land.google:2112 is a chrome extension origin.
12 testRunner.setIsolatedWorldSecurityOrigin(1, "https://cloud-cuckoo-land.goog le:2112");
13 testRunner.evaluateScriptInIsolatedWorld(1, "var xhr = new XMLHttpRequest(); xhr.open('GET', 'blob:https://cloud-cuckoo-land.google:2112/456789', false); xh r.send();");
11 } 14 }
12 </script> 15 </script>
13 </body> 16 </body>
OLDNEW
« no previous file with comments | « extensions/browser/guest_view/web_view/web_view_guest.cc ('k') | no next file » | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698