| OLD | NEW |
| 1 // Copyright 2014 The Chromium Authors. All rights reserved. | 1 // Copyright 2014 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "platform/weborigin/SchemeRegistry.h" | 5 #include "platform/weborigin/SchemeRegistry.h" |
| 6 | 6 |
| 7 #include "testing/gtest/include/gtest/gtest.h" | 7 #include "testing/gtest/include/gtest/gtest.h" |
| 8 | 8 |
| 9 namespace blink { | 9 namespace blink { |
| 10 namespace { | 10 namespace { |
| 11 | 11 |
| 12 const char kTestScheme[] = "test-scheme"; | 12 const char kTestScheme[] = "test-scheme"; |
| 13 const char kTestSchemeUppercase[] = "TEST-SCHEME"; | |
| 14 const char kTestScheme2[] = "test-scheme-2"; | 13 const char kTestScheme2[] = "test-scheme-2"; |
| 15 | 14 |
| 16 class SchemeRegistryTest : public ::testing::Test { | 15 class SchemeRegistryTest : public ::testing::Test { |
| 17 void TearDown() override { | 16 void TearDown() override { |
| 18 SchemeRegistry::removeURLSchemeRegisteredAsBypassingContentSecurityPolicy( | 17 SchemeRegistry::removeURLSchemeRegisteredAsBypassingContentSecurityPolicy( |
| 19 kTestScheme); | 18 kTestScheme); |
| 20 } | 19 } |
| 21 }; | 20 }; |
| 22 | 21 |
| 23 TEST_F(SchemeRegistryTest, NoCSPBypass) { | 22 TEST_F(SchemeRegistryTest, NoCSPBypass) { |
| 24 EXPECT_FALSE( | 23 EXPECT_FALSE( |
| 25 SchemeRegistry::schemeShouldBypassContentSecurityPolicy(kTestScheme)); | 24 SchemeRegistry::schemeShouldBypassContentSecurityPolicy(kTestScheme)); |
| 26 EXPECT_FALSE(SchemeRegistry::schemeShouldBypassContentSecurityPolicy( | 25 EXPECT_FALSE(SchemeRegistry::schemeShouldBypassContentSecurityPolicy( |
| 27 kTestSchemeUppercase)); | |
| 28 EXPECT_FALSE(SchemeRegistry::schemeShouldBypassContentSecurityPolicy( | |
| 29 kTestScheme, SchemeRegistry::PolicyAreaImage)); | 26 kTestScheme, SchemeRegistry::PolicyAreaImage)); |
| 30 } | 27 } |
| 31 | 28 |
| 32 TEST_F(SchemeRegistryTest, FullCSPBypass) { | 29 TEST_F(SchemeRegistryTest, FullCSPBypass) { |
| 33 SchemeRegistry::registerURLSchemeAsBypassingContentSecurityPolicy( | 30 SchemeRegistry::registerURLSchemeAsBypassingContentSecurityPolicy( |
| 34 kTestScheme); | 31 kTestScheme); |
| 35 EXPECT_TRUE( | 32 EXPECT_TRUE( |
| 36 SchemeRegistry::schemeShouldBypassContentSecurityPolicy(kTestScheme)); | 33 SchemeRegistry::schemeShouldBypassContentSecurityPolicy(kTestScheme)); |
| 37 EXPECT_TRUE(SchemeRegistry::schemeShouldBypassContentSecurityPolicy( | 34 EXPECT_TRUE(SchemeRegistry::schemeShouldBypassContentSecurityPolicy( |
| 38 kTestSchemeUppercase)); | |
| 39 EXPECT_TRUE(SchemeRegistry::schemeShouldBypassContentSecurityPolicy( | |
| 40 kTestScheme, SchemeRegistry::PolicyAreaImage)); | 35 kTestScheme, SchemeRegistry::PolicyAreaImage)); |
| 41 EXPECT_FALSE( | 36 EXPECT_FALSE( |
| 42 SchemeRegistry::schemeShouldBypassContentSecurityPolicy(kTestScheme2)); | 37 SchemeRegistry::schemeShouldBypassContentSecurityPolicy(kTestScheme2)); |
| 43 EXPECT_FALSE(SchemeRegistry::schemeShouldBypassContentSecurityPolicy( | 38 EXPECT_FALSE(SchemeRegistry::schemeShouldBypassContentSecurityPolicy( |
| 44 kTestScheme2, SchemeRegistry::PolicyAreaImage)); | 39 kTestScheme2, SchemeRegistry::PolicyAreaImage)); |
| 45 } | 40 } |
| 46 | 41 |
| 47 TEST_F(SchemeRegistryTest, PartialCSPBypass) { | 42 TEST_F(SchemeRegistryTest, PartialCSPBypass) { |
| 48 SchemeRegistry::registerURLSchemeAsBypassingContentSecurityPolicy( | 43 SchemeRegistry::registerURLSchemeAsBypassingContentSecurityPolicy( |
| 49 kTestScheme, SchemeRegistry::PolicyAreaImage); | 44 kTestScheme, SchemeRegistry::PolicyAreaImage); |
| 50 EXPECT_FALSE( | 45 EXPECT_FALSE( |
| 51 SchemeRegistry::schemeShouldBypassContentSecurityPolicy(kTestScheme)); | 46 SchemeRegistry::schemeShouldBypassContentSecurityPolicy(kTestScheme)); |
| 52 EXPECT_FALSE(SchemeRegistry::schemeShouldBypassContentSecurityPolicy( | |
| 53 kTestSchemeUppercase)); | |
| 54 EXPECT_TRUE(SchemeRegistry::schemeShouldBypassContentSecurityPolicy( | 47 EXPECT_TRUE(SchemeRegistry::schemeShouldBypassContentSecurityPolicy( |
| 55 kTestScheme, SchemeRegistry::PolicyAreaImage)); | 48 kTestScheme, SchemeRegistry::PolicyAreaImage)); |
| 56 EXPECT_TRUE(SchemeRegistry::schemeShouldBypassContentSecurityPolicy( | |
| 57 kTestSchemeUppercase, SchemeRegistry::PolicyAreaImage)); | |
| 58 EXPECT_FALSE(SchemeRegistry::schemeShouldBypassContentSecurityPolicy( | 49 EXPECT_FALSE(SchemeRegistry::schemeShouldBypassContentSecurityPolicy( |
| 59 kTestScheme, SchemeRegistry::PolicyAreaStyle)); | 50 kTestScheme, SchemeRegistry::PolicyAreaStyle)); |
| 60 EXPECT_FALSE(SchemeRegistry::schemeShouldBypassContentSecurityPolicy( | 51 EXPECT_FALSE(SchemeRegistry::schemeShouldBypassContentSecurityPolicy( |
| 61 kTestSchemeUppercase, SchemeRegistry::PolicyAreaStyle)); | |
| 62 EXPECT_FALSE(SchemeRegistry::schemeShouldBypassContentSecurityPolicy( | |
| 63 kTestScheme2, SchemeRegistry::PolicyAreaImage)); | 52 kTestScheme2, SchemeRegistry::PolicyAreaImage)); |
| 64 } | 53 } |
| 65 | 54 |
| 66 TEST_F(SchemeRegistryTest, BypassSecureContextCheck) { | 55 TEST_F(SchemeRegistryTest, BypassSecureContextCheck) { |
| 67 const char* scheme1 = "http"; | 56 const char* scheme1 = "http"; |
| 68 const char* scheme2 = "https"; | 57 const char* scheme2 = "https"; |
| 69 const char* scheme3 = "random-scheme"; | 58 const char* scheme3 = "random-scheme"; |
| 70 const char* scheme4 = "RANDOM-SCHEME"; | 59 const char* scheme4 = "RANDOM-SCHEME"; |
| 71 | 60 |
| 72 EXPECT_FALSE(SchemeRegistry::schemeShouldBypassSecureContextCheck(scheme1)); | 61 EXPECT_FALSE(SchemeRegistry::schemeShouldBypassSecureContextCheck(scheme1)); |
| 73 EXPECT_FALSE(SchemeRegistry::schemeShouldBypassSecureContextCheck(scheme2)); | 62 EXPECT_FALSE(SchemeRegistry::schemeShouldBypassSecureContextCheck(scheme2)); |
| 74 EXPECT_FALSE(SchemeRegistry::schemeShouldBypassSecureContextCheck(scheme3)); | 63 EXPECT_FALSE(SchemeRegistry::schemeShouldBypassSecureContextCheck(scheme3)); |
| 75 EXPECT_FALSE(SchemeRegistry::schemeShouldBypassSecureContextCheck(scheme4)); | 64 EXPECT_FALSE(SchemeRegistry::schemeShouldBypassSecureContextCheck(scheme4)); |
| 76 | 65 |
| 77 SchemeRegistry::registerURLSchemeBypassingSecureContextCheck("random-scheme"); | 66 SchemeRegistry::registerURLSchemeBypassingSecureContextCheck("random-scheme"); |
| 78 | 67 |
| 79 EXPECT_FALSE(SchemeRegistry::schemeShouldBypassSecureContextCheck(scheme1)); | 68 EXPECT_FALSE(SchemeRegistry::schemeShouldBypassSecureContextCheck(scheme1)); |
| 80 EXPECT_FALSE(SchemeRegistry::schemeShouldBypassSecureContextCheck(scheme2)); | 69 EXPECT_FALSE(SchemeRegistry::schemeShouldBypassSecureContextCheck(scheme2)); |
| 81 EXPECT_TRUE(SchemeRegistry::schemeShouldBypassSecureContextCheck(scheme3)); | 70 EXPECT_TRUE(SchemeRegistry::schemeShouldBypassSecureContextCheck(scheme3)); |
| 82 EXPECT_TRUE(SchemeRegistry::schemeShouldBypassSecureContextCheck(scheme4)); | 71 EXPECT_TRUE(SchemeRegistry::schemeShouldBypassSecureContextCheck(scheme4)); |
| 83 } | 72 } |
| 84 | 73 |
| 85 } // namespace | 74 } // namespace |
| 86 } // namespace blink | 75 } // namespace blink |
| OLD | NEW |