Chromium Code Reviews Chromium Code Reviews
Issue 2570613002:
Add OffscreenCanvas to ImageBitmapSource union typedef (Closed)
| Index: third_party/WebKit/LayoutTests/http/tests/security/offscreencanvas-read-blocked-no-crossorigin.html |
| diff --git a/third_party/WebKit/LayoutTests/http/tests/security/offscreencanvas-read-blocked-no-crossorigin.html b/third_party/WebKit/LayoutTests/http/tests/security/offscreencanvas-read-blocked-no-crossorigin.html |
| new file mode 100644 |
| index 0000000000000000000000000000000000000000..d956b0391d5471f8ada402eb028efa3a55443cb2 |
| --- /dev/null |
| +++ b/third_party/WebKit/LayoutTests/http/tests/security/offscreencanvas-read-blocked-no-crossorigin.html |
| @@ -0,0 +1,59 @@ |
| +<!DOCTYPE html> |
| +<script src="../../resources/testharness.js"></script> |
| +<script src="../../resources/testharnessreport.js"></script> |
| +<script> |
| + |
| +function verifyOffscreenCanvasTaintedThenDone(offscreen, t) { |
| + assert_throws("SecurityError", function() { |
| + offscreen.getContext("2d").getImageData(0, 0, 1, 1); |
| + }, "Check getImageData blocked."); |
| + offscreen.convertToBlob().then( |
| + function() { |
| + assert_unreached("Promise returned by convertToBlob was resolved."); |
| + t.done(); |
| + }, |
| + rejectionValue => { |
| + assert_equals(rejectionValue.name, "SecurityError"); |
| + t.done(); |
| + } |
| + ); |
| +} |
| + |
| +async_test(t => { |
| + var image = new Image(); |
| + // Notice that we don't set the image.crossOrigin property. |
| + image.src = "http://localhost:8000/security/resources/abe-allow-star.php"; |
| + image.onload = function() { |
| + var offscreen = new OffscreenCanvas(10, 10); |
| + var ctx = offscreen.getContext('2d'); |
| + ctx.drawImage(image, 0, 0); |
| + t.step(function() { |
| + verifyOffscreenCanvasTaintedThenDone(offscreen, t); |
| + }); |
| + } |
| +}, "Verify that an OffscreenCanvas tainted with cross-origin content cannot be read."); |
| + |
| +async_test(t => { |
| + var image = new Image(); |
| + // Notice that we don't set the image.crossOrigin property. |
| + image.src = "http://localhost:8000/security/resources/abe-allow-star.php"; |
| + image.onload = function() { |
| + var offscreen = new OffscreenCanvas(10, 10); |
| + var ctx = offscreen.getContext('2d'); |
| + ctx.drawImage(image, 0, 0); |
| + createImageBitmap(offscreen).then(imageBitmap => { |
| + var offscreen2 = new OffscreenCanvas(10, 10); |
| + var ctx2 = offscreen2.getContext('2d'); |
| + ctx2.drawImage(imageBitmap, 0, 0); |
| + t.step(function() { |
| + verifyOffscreenCanvasTaintedThenDone(offscreen, t); |
| + }); |
| + }) |
| + } |
| +}, "Verify that createImageBitmap(OffscreenCanvas) propagates th origin-clean flag."); |
|
Stephen White
2016/12/12 19:55:46
Nit: th -> the
|
| + |
| + |
| + |
| + |
| + |
| +</script> |
