Stop preloading scripts that have invalid type/language attributes

third_party/WebKit/Source/core/html/parser/HTMLPreloadScannerTest.cpp

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "core/html/parser/HTMLPreloadScanner.h"
 
 #include "core/MediaTypeNames.h"
 #include "core/css/MediaValuesCached.h"
 #include "core/fetch/ClientHintsPreferences.h"
 #include "core/frame/Settings.h"
@@ skipping 722 matching lines @@
       {"http://example.test", "<img src='data:text/html,<p>data</data>'>",
        nullptr, "http://example.test/", Resource::Image, 0},
       {"data:text/html,<a>anchor</a>", "<img src='#anchor'>", nullptr,
        "http://example.test/", Resource::Image, 0},
   };
 
   for (const auto& testCase : testCases)
     test(testCase);
 }
 
+// The preload scanner should follow the same policy that the ScriptLoader does
+// with regard to the type and language attribute.
+TEST_F(HTMLPreloadScannerTest, testScriptTypeAndLanguage) {
+  TestCase testCases[] = {
+      // Allow empty src and language attributes.
+      {"http://example.test", "<script src='test.js'></script>", "test.js",
+       "http://example.test/", Resource::Script, 0},
+      {"http://example.test",
+       "<script type='' language='' src='test.js'></script>", "test.js",
+       "http://example.test/", Resource::Script, 0},
+      // Allow standard language and type attributes.
+      {"http://example.test",
+       "<script type='text/javascript' src='test.js'></script>", "test.js",
+       "http://example.test/", Resource::Script, 0},
+      {"http://example.test",
+       "<script type='text/javascript' language='javascript' "
+       "src='test.js'></script>",
+       "test.js", "http://example.test/", Resource::Script, 0},
+      // Allow legacy languages in the "language" attribute with an empty
+      // type.
+      {"http://example.test",
+       "<script language='javascript1.1' src='test.js'></script>", "test.js",
+       "http://example.test/", Resource::Script, 0},
+      // Allow legacy languages in the "type" attribute.
+      {"http://example.test",
+       "<script type='javascript' src='test.js'></script>", "test.js",
+       "http://example.test/", Resource::Script, 0},
+      {"http://example.test",
+       "<script type='javascript1.7' src='test.js'></script>", "test.js",
+       "http://example.test/", Resource::Script, 0},
+      // Do not allow invalid types in the "type" attribute.
+      {"http://example.test", "<script type='invalid' src='test.js'></script>",
+       nullptr, "http://example.test/", Resource::Script, 0},
+      {"http://example.test", "<script type='asdf' src='test.js'></script>",
+       nullptr, "http://example.test/", Resource::Script, 0},
+      // Do not allow invalid languages.
+      {"http://example.test",
+       "<script language='french' src='test.js'></script>", nullptr,
+       "http://example.test/", Resource::Script, 0},
+      {"http://example.test",
+       "<script language='python' src='test.js'></script>", nullptr,
+       "http://example.test/", Resource::Script, 0},
+  };
+
+  for (const auto& testCase : testCases)
+    test(testCase);
+}
+
 }  // namespace blink