Initial Implementation of Iframe Attribute for Feature Policy (Part 2)

content/browser/site_per_process_browsertest.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/site_per_process_browsertest.h"
 
 #include <stddef.h>
 #include <stdint.h>
 
 #include <algorithm>
@@ skipping 52 matching lines @@
 #include "content/public/test/test_navigation_observer.h"
 #include "content/public/test/test_utils.h"
 #include "content/shell/browser/shell.h"
 #include "content/test/content_browser_test_utils_internal.h"
 #include "ipc/ipc.mojom.h"
 #include "ipc/ipc_security_test_util.h"
 #include "net/dns/mock_host_resolver.h"
 #include "net/test/embedded_test_server/embedded_test_server.h"
 #include "net/test/embedded_test_server/http_request.h"
 #include "net/test/embedded_test_server/http_response.h"
+#include "testing/gmock/include/gmock/gmock.h"
 #include "testing/gtest/include/gtest/gtest.h"
+#include "third_party/WebKit/public/platform/WebFeaturePolicy.h"
 #include "third_party/WebKit/public/platform/WebInputEvent.h"
 #include "third_party/WebKit/public/platform/WebInsecureRequestPolicy.h"
 #include "third_party/WebKit/public/web/WebSandboxFlags.h"
 #include "ui/display/display_switches.h"
 #include "ui/display/screen.h"
 #include "ui/events/base_event_utils.h"
 #include "ui/events/event.h"
 #include "ui/events/event_utils.h"
 #include "ui/events/latency_info.h"
 #include "ui/gfx/geometry/point.h"
@@ skipping 9099 matching lines @@
   EXPECT_TRUE(NavigateToURL(
       shell(), embedded_test_server()->GetURL("b.com", "/title3.html")));
 
   // Pretend that a.com just requested a context menu. This used to cause a
   // because the RenderWidgetHostView is destroyed when the frame is swapped and
   // added to pending delete list.
   rfh->OnMessageReceived(
       FrameHostMsg_ContextMenu(rfh->GetRoutingID(), ContextMenuParams()));
 }
 
+// Test iframe "allow" attribute is propogated correctly, both on same-site and
+// cross-site iframes.
+IN_PROC_BROWSER_TEST_F(SitePerProcessBrowserTest, AllowedIFrames) {
+  GURL url(embedded_test_server()->GetURL("/allowed_frames.html"));
+  EXPECT_TRUE(NavigateToURL(shell(), url));
+
+  FrameTreeNode* root = web_contents()->GetFrameTree()->root();
+
+  EXPECT_EQ(embedded_test_server()->GetURL("bar.com", "/title1.html"),
+            root->child_at(0)->current_url());
+
+  EXPECT_EQ(
+      root->child_at(0)->frame_owner_properties().allowed_feature_names.size(),
+      2u);
+  EXPECT_EQ(
+      root->child_at(0)->frame_owner_properties().allowed_feature_names[0],
+      blink::WebFeaturePolicyFeature::Fullscreen);
+  EXPECT_EQ(
+      root->child_at(0)->frame_owner_properties().allowed_feature_names[1],
+      blink::WebFeaturePolicyFeature::Vibrate);
+  EXPECT_EQ(
+      root->child_at(1)->frame_owner_properties().allowed_feature_names.size(),
+      2u);
+  EXPECT_EQ(
+      root->child_at(1)->frame_owner_properties().allowed_feature_names[0],
+      blink::WebFeaturePolicyFeature::Fullscreen);
+  EXPECT_EQ(
+      root->child_at(1)->frame_owner_properties().allowed_feature_names[1],
+      blink::WebFeaturePolicyFeature::Vibrate);
+}
+
+// Test dynamic updates to iframe "allow" attribute are propogated correctly,
+// both on same-site and cross-site iframes.
+IN_PROC_BROWSER_TEST_F(SitePerProcessBrowserTest, AllowedIFramesDynamic) {
+  GURL main_url(embedded_test_server()->GetURL("/allowed_frames.html"));
+  EXPECT_TRUE(NavigateToURL(shell(), main_url));
+
+  FrameTreeNode* root = web_contents()->GetFrameTree()->root();
+
+  EXPECT_TRUE(ExecuteScript(
+      root, "document.getElementById('child-1').removeAttribute('allow')"));
+  EXPECT_TRUE(ExecuteScript(
+      root,
+      "document.getElementById('child-2').setAttribute('allow', 'payment')"));
+
+  EXPECT_TRUE(root->child_at(0)
+                  ->frame_owner_properties()
+                  .allowed_feature_names.empty());
+  EXPECT_EQ(
+      root->child_at(1)->frame_owner_properties().allowed_feature_names.size(),
+      1u);
+  EXPECT_EQ(
+      root->child_at(1)->frame_owner_properties().allowed_feature_names[0],
+      blink::WebFeaturePolicyFeature::Payment);
+}
+
 // Test harness that allows for "barrier" style delaying of requests matching
 // certain paths. Call SetDelayedRequestsForPath to delay requests, then
 // SetUpEmbeddedTestServer to register handlers and start the server.
 class RequestDelayingSitePerProcessBrowserTest
     : public SitePerProcessBrowserTest {
  public:
   RequestDelayingSitePerProcessBrowserTest()
       : test_server_(base::MakeUnique<net::EmbeddedTestServer>()) {}
 
   // Must be called after any calls to SetDelayedRequestsForPath.
@@ skipping 131 matching lines @@
                                   "subframes_with_resources.html?urls=%s,%s&"
                                   "numSubresources=3",
                                   path0.c_str(), path1.c_str())));
   EXPECT_TRUE(NavigateToURL(shell(), url));
   bool result;
   EXPECT_TRUE(ExecuteScriptAndExtractBool(shell(), "createFrames()", &result));
   EXPECT_TRUE(result);
 }
 
 }  // namespace content