Block renderer-initiated main frame navigations to data URLs

extensions/test/data/web_view/apitest/main.js

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 var embedder = {};
 
 // TODO(lfg) Move these functions to a common js.
 embedder.setUp_ = function(config) {
   if (!config || !config.testServer) {
     return;
   }
   embedder.baseGuestURL = 'http://localhost:' + config.testServer.port;
   embedder.closeSocketURL = embedder.baseGuestURL + '/close-socket';
   embedder.emptyGuestURL = embedder.baseGuestURL + '/empty_guest.html';
   embedder.noReferrerGuestURL =
       embedder.baseGuestURL + '/guest_noreferrer.html';
   embedder.detectUserAgentURL = embedder.baseGuestURL + '/detect-user-agent';
   embedder.redirectGuestURL = embedder.baseGuestURL + '/server-redirect';
   embedder.redirectGuestURLDest =
       embedder.baseGuestURL + '/guest_redirect.html';
   embedder.windowOpenGuestURL = embedder.baseGuestURL + '/guest.html';
+  embedder.windowOpenGuestDataURL =
+      embedder.baseGuestURL + '/guest_data_url.html';
   embedder.sameDocumentNavigationURL =
       embedder.baseGuestURL + '/guest_same_document_navigation.html';
 };
 
 window.runTest = function(testName) {
   if (!embedder.test.testList[testName]) {
     window.console.warn('Incorrect testName: ' + testName);
     embedder.test.fail();
     return;
   }
@@ skipping 1094 matching lines @@
       embedder.test.succeed();
     });
     webview.executeScript({
       code: 'window.location.href = "tel:+12223334444";'
     }, function(results) {});
   });
   webview.setAttribute('src', 'data:text/html,navigate to external protocol');
   document.body.appendChild(webview);
 }
 
+// This test verifies that redirecting a webview to a data URL is blocked.
+function testRedirectToDataUrlBlocked() {
+  var webview = document.createElement('webview');
+  webview.addEventListener('consolemessage', function(e) {
+    window.console.log('consolemessage: ' + e.message);
+    if (e.message.startsWith(
+        'Not allowed to top-level navigate to resource:')) {
+      embedder.test.succeed();
+    }
+  });
+  webview.addEventListener('loadstop', function(e) {
+    if (webview.getAttribute('src').startsWith("data:"))
+      embedder.test.fail();
+  });
+  webview.setAttribute('src', embedder.windowOpenGuestDataURL);
+  document.body.appendChild(webview);
+}
+
+// This test verifies that redirecting a webview to a data URL is allowed if the
+// current URL is already a data URL.
+function testRedirectToDataUrlFromDataUrlAllowed() {
+  var webview = document.createElement('webview');
+  webview.addEventListener('loadstop', function(e) {
+    if (webview.getAttribute('src').startsWith("data:text/html")) {
+      webview.executeScript({
+        code: 'window.location.href = "data:text/plain, success";'
+      }, function(results) {});
+    } else if (webview.getAttribute('src').startsWith("data:text/plain")) {
+      embedder.test.succeed();
+    }
+  });
+  webview.addEventListener('consolemessage', function(e) {
+    window.console.log('consolemessage: ' + e.message);
+    if (e.message.startsWith(
+        'Not allowed to top-level navigate to resource:')) {
+      embedder.test.fail();
+    }
+  });
+  webview.setAttribute('src', 'data:text/html,navigate to another data url');
+  document.body.appendChild(webview);
+}
+
 // This test ensures if the guest isn't there and we resize the guest (from JS),
 // it remembers the size correctly.
 function testNavigateAfterResize() {
   var webview = document.createElement('webview');
 
   var postMessageHandler = function(e) {
     var data = JSON.parse(e.data);
     webview.removeEventListener('message', postMessageHandler);
     if (data[0] == 'dimension-response') {
       var actualWidth = data[1];
@@ skipping 76 matching lines @@
       embedder.test.fail();
     } else {
       webview.src = tests[loadCommitCount];
     }
   });
   webview.src = tests[0];
   document.body.appendChild(webview);
 }
 
 // This test verifies that new window attachment functions as expected.
+//
+// TODO(crbug.com/594215) Test that opening a new window with a data URL is
+// blocked. There is currently no way to test this, as the block message is
+// printed on the new window which never gets created, so the message is lost.
+// Also test that opening a new window with a data URL when the webview is
+// already on a data URL is allowed.
 function testNewWindow() {
   var webview = document.createElement('webview');
   webview.addEventListener('newwindow', function(e) {
     e.preventDefault();
     var newwebview = document.createElement('webview');
     newwebview.addEventListener('loadstop', function(evt) {
       // If the new window finishes loading, the test is successful.
       embedder.test.succeed();
     });
     document.body.appendChild(newwebview);
@@ skipping 536 matching lines @@
   'testLoadAbortIllegalChromeURL': testLoadAbortIllegalChromeURL,
   'testLoadAbortIllegalFileURL': testLoadAbortIllegalFileURL,
   'testLoadAbortIllegalJavaScriptURL': testLoadAbortIllegalJavaScriptURL,
   'testLoadAbortInvalidNavigation': testLoadAbortInvalidNavigation,
   'testLoadAbortNonWebSafeScheme': testLoadAbortNonWebSafeScheme,
   'testLoadEventsSameDocumentNavigation': testLoadEventsSameDocumentNavigation,
   'testLoadProgressEvent': testLoadProgressEvent,
   'testLoadStartLoadRedirect': testLoadStartLoadRedirect,
   'testNavigateAfterResize': testNavigateAfterResize,
   'testNavigationToExternalProtocol': testNavigationToExternalProtocol,
+  'testRedirectToDataUrlBlocked': testRedirectToDataUrlBlocked,
+  'testRedirectToDataUrlFromDataUrlAllowed':
+      testRedirectToDataUrlFromDataUrlAllowed,
   'testNavOnConsecutiveSrcAttributeChanges':
       testNavOnConsecutiveSrcAttributeChanges,
   'testNavOnSrcAttributeChange': testNavOnSrcAttributeChange,
   'testNewWindow': testNewWindow,
   'testNewWindowNoPreventDefault': testNewWindowNoPreventDefault,
   'testNewWindowNoReferrerLink': testNewWindowNoReferrerLink,
   'testNewWindowTwoListeners': testNewWindowTwoListeners,
   'testOnEventProperties': testOnEventProperties,
   'testPartitionChangeAfterNavigation': testPartitionChangeAfterNavigation,
   'testPartitionRemovalAfterNavigationFails':
@@ skipping 12 matching lines @@
   'testWebRequestAPIGoogleProperty': testWebRequestAPIGoogleProperty,
   'testCaptureVisibleRegion': testCaptureVisibleRegion
 };
 
 onload = function() {
   chrome.test.getConfig(function(config) {
     embedder.setUp_(config);
     chrome.test.sendMessage('LAUNCHED');
   });
 };