| OLD | NEW |
| 1 // Copyright 2016 The Chromium Authors. All rights reserved. | 1 // Copyright 2016 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "content/common/feature_policy/feature_policy.h" | 5 #include "content/common/feature_policy/feature_policy.h" |
| 6 | 6 |
| 7 #include "testing/gtest/include/gtest/gtest.h" | 7 #include "testing/gtest/include/gtest/gtest.h" |
| 8 #include "url/gurl.h" | 8 #include "url/gurl.h" |
| 9 | 9 |
| 10 namespace content { | 10 namespace content { |
| 11 | 11 |
| 12 namespace { | 12 namespace { |
| 13 | 13 |
| 14 // This is an example of a feature which should be enabled by default in all | 14 // This is an example of a feature which should be enabled by default in all |
| 15 // frames. | 15 // frames. |
| 16 const FeaturePolicy::Feature kDefaultOnFeatureDfn{ | 16 const FeaturePolicy::Feature kDefaultOnFeatureDfn{ |
| 17 "default-on", FeaturePolicy::FeatureDefault::EnableForAll}; | 17 kDefaultOnFeature, FeaturePolicy::FeatureDefault::EnableForAll}; |
| 18 | 18 |
| 19 // This is an example of a feature which should be enabled in top-level frames, | 19 // This is an example of a feature which should be enabled in top-level frames, |
| 20 // and same-origin child-frames, but must be delegated to all cross-origin | 20 // and same-origin child-frames, but must be delegated to all cross-origin |
| 21 // frames explicitly. | 21 // frames explicitly. |
| 22 const FeaturePolicy::Feature kDefaultSelfFeatureDfn{ | 22 const FeaturePolicy::Feature kDefaultSelfFeatureDfn{ |
| 23 "default-self", FeaturePolicy::FeatureDefault::EnableForSelf}; | 23 kDefaultSelfFeature, FeaturePolicy::FeatureDefault::EnableForSelf}; |
| 24 | 24 |
| 25 // This is an example of a feature which should be disabled by default, both in | 25 // This is an example of a feature which should be disabled by default, both in |
| 26 // top-level and nested frames. | 26 // top-level and nested frames. |
| 27 const FeaturePolicy::Feature kDefaultOffFeatureDfn{ | 27 const FeaturePolicy::Feature kDefaultOffFeatureDfn{ |
| 28 "default-off", FeaturePolicy::FeatureDefault::DisableForAll}; | 28 kDefaultOffFeature, FeaturePolicy::FeatureDefault::DisableForAll}; |
| 29 | 29 |
| 30 // Define the three new features for testing | 30 // Define the three new features for testing |
| 31 blink::WebFeaturePolicyFeature kDefaultOnFeature = | 31 blink::WebFeaturePolicyFeature kDefaultOnFeature = |
| 32 static_cast<blink::WebFeaturePolicyFeature>( | 32 static_cast<blink::WebFeaturePolicyFeature>( |
| 33 static_cast<int>(blink::WebFeaturePolicyFeature::LAST_FEATURE) + 1); | 33 static_cast<int>(blink::WebFeaturePolicyFeature::LAST_FEATURE) + 1); |
| 34 | 34 |
| 35 blink::WebFeaturePolicyFeature kDefaultSelfFeature = | 35 blink::WebFeaturePolicyFeature kDefaultSelfFeature = |
| 36 static_cast<blink::WebFeaturePolicyFeature>( | 36 static_cast<blink::WebFeaturePolicyFeature>( |
| 37 static_cast<int>(blink::WebFeaturePolicyFeature::LAST_FEATURE) + 2); | 37 static_cast<int>(blink::WebFeaturePolicyFeature::LAST_FEATURE) + 2); |
| 38 | 38 |
| (...skipping 99 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 138 // | |(2) Origin B | | | 138 // | |(2) Origin B | | |
| 139 // | |Policy: {"default-self": ["self"]} | | | 139 // | |Policy: {"default-self": ["self"]} | | |
| 140 // | +-----------------------------------+ | | 140 // | +-----------------------------------+ | |
| 141 // +---------------------------------------+ | 141 // +---------------------------------------+ |
| 142 // Default-self feature should be disabled in cross origin frame, even if no | 142 // Default-self feature should be disabled in cross origin frame, even if no |
| 143 // policy was specified in the parent frame. | 143 // policy was specified in the parent frame. |
| 144 std::unique_ptr<FeaturePolicy> policy1 = | 144 std::unique_ptr<FeaturePolicy> policy1 = |
| 145 CreateFromParentPolicy(nullptr, origin_a_); | 145 CreateFromParentPolicy(nullptr, origin_a_); |
| 146 std::unique_ptr<FeaturePolicy> policy2 = | 146 std::unique_ptr<FeaturePolicy> policy2 = |
| 147 CreateFromParentPolicy(policy1.get(), origin_b_); | 147 CreateFromParentPolicy(policy1.get(), origin_b_); |
| 148 policy2->SetHeaderPolicy({{{"default-self", false, {origin_b_}}}}); | 148 policy2->SetHeaderPolicy({{{kDefaultSelfFeature false, {origin_b_}}}}); |
| 149 EXPECT_FALSE(policy2->IsFeatureEnabled(kDefaultSelfFeature)); | 149 EXPECT_FALSE(policy2->IsFeatureEnabled(kDefaultSelfFeature)); |
| 150 } | 150 } |
| 151 | 151 |
| 152 TEST_F(FeaturePolicyTest, TestFrameSelfInheritance) { | 152 TEST_F(FeaturePolicyTest, TestFrameSelfInheritance) { |
| 153 // +------------------------------------------+ | 153 // +------------------------------------------+ |
| 154 // |(1) Origin A | | 154 // |(1) Origin A | |
| 155 // |Policy: {"default-self": ["self"]} | | 155 // |Policy: {"default-self": ["self"]} | |
| 156 // | +-----------------+ +-----------------+ | | 156 // | +-----------------+ +-----------------+ | |
| 157 // | |(2) Origin A | |(4) Origin B | | | 157 // | |(2) Origin A | |(4) Origin B | | |
| 158 // | |No Policy | |No Policy | | | 158 // | |No Policy | |No Policy | | |
| 159 // | | +-------------+ | | +-------------+ | | | 159 // | | +-------------+ | | +-------------+ | | |
| 160 // | | |(3)Origin A | | | |(5)Origin B | | | | 160 // | | |(3)Origin A | | | |(5)Origin B | | | |
| 161 // | | |No Policy | | | |No Policy | | | | 161 // | | |No Policy | | | |No Policy | | | |
| 162 // | | +-------------+ | | +-------------+ | | | 162 // | | +-------------+ | | +-------------+ | | |
| 163 // | +-----------------+ +-----------------+ | | 163 // | +-----------------+ +-----------------+ | |
| 164 // +------------------------------------------+ | 164 // +------------------------------------------+ |
| 165 // Feature should be enabled at the top-level, and through the chain of | 165 // Feature should be enabled at the top-level, and through the chain of |
| 166 // same-origin frames 2 and 3. It should be disabled in frames 4 and 5, as | 166 // same-origin frames 2 and 3. It should be disabled in frames 4 and 5, as |
| 167 // they are at a different origin. | 167 // they are at a different origin. |
| 168 std::unique_ptr<FeaturePolicy> policy1 = | 168 std::unique_ptr<FeaturePolicy> policy1 = |
| 169 CreateFromParentPolicy(nullptr, origin_a_); | 169 CreateFromParentPolicy(nullptr, origin_a_); |
| 170 policy1->SetHeaderPolicy({{{"default-self", false, {origin_a_}}}}); | 170 policy1->SetHeaderPolicy({{{kDefaultSelfFeature false, {origin_a_}}}}); |
| 171 std::unique_ptr<FeaturePolicy> policy2 = | 171 std::unique_ptr<FeaturePolicy> policy2 = |
| 172 CreateFromParentPolicy(policy1.get(), origin_a_); | 172 CreateFromParentPolicy(policy1.get(), origin_a_); |
| 173 std::unique_ptr<FeaturePolicy> policy3 = | 173 std::unique_ptr<FeaturePolicy> policy3 = |
| 174 CreateFromParentPolicy(policy2.get(), origin_a_); | 174 CreateFromParentPolicy(policy2.get(), origin_a_); |
| 175 std::unique_ptr<FeaturePolicy> policy4 = | 175 std::unique_ptr<FeaturePolicy> policy4 = |
| 176 CreateFromParentPolicy(policy1.get(), origin_b_); | 176 CreateFromParentPolicy(policy1.get(), origin_b_); |
| 177 std::unique_ptr<FeaturePolicy> policy5 = | 177 std::unique_ptr<FeaturePolicy> policy5 = |
| 178 CreateFromParentPolicy(policy4.get(), origin_b_); | 178 CreateFromParentPolicy(policy4.get(), origin_b_); |
| 179 EXPECT_TRUE(policy2->IsFeatureEnabled(kDefaultSelfFeature)); | 179 EXPECT_TRUE(policy2->IsFeatureEnabled(kDefaultSelfFeature)); |
| 180 EXPECT_TRUE(policy3->IsFeatureEnabled(kDefaultSelfFeature)); | 180 EXPECT_TRUE(policy3->IsFeatureEnabled(kDefaultSelfFeature)); |
| (...skipping 11 matching lines...) Expand all Loading... |
| 192 // | | +-------------+ | | | 192 // | | +-------------+ | | |
| 193 // | | |(3)Origin A | | | | 193 // | | |(3)Origin A | | | |
| 194 // | | |No Policy | | | | 194 // | | |No Policy | | | |
| 195 // | | +-------------+ | | | 195 // | | +-------------+ | | |
| 196 // | +-----------------+ | | 196 // | +-----------------+ | |
| 197 // +-----------------------------------+ | 197 // +-----------------------------------+ |
| 198 // Feature which is enabled at top-level should be disabled in frame 3, as | 198 // Feature which is enabled at top-level should be disabled in frame 3, as |
| 199 // it is embedded by frame 2, for which the feature is not enabled. | 199 // it is embedded by frame 2, for which the feature is not enabled. |
| 200 std::unique_ptr<FeaturePolicy> policy1 = | 200 std::unique_ptr<FeaturePolicy> policy1 = |
| 201 CreateFromParentPolicy(nullptr, origin_a_); | 201 CreateFromParentPolicy(nullptr, origin_a_); |
| 202 policy1->SetHeaderPolicy({{{"default-self", false, {origin_a_}}}}); | 202 policy1->SetHeaderPolicy({{{kDefaultSelfFeature false, {origin_a_}}}}); |
| 203 std::unique_ptr<FeaturePolicy> policy2 = | 203 std::unique_ptr<FeaturePolicy> policy2 = |
| 204 CreateFromParentPolicy(policy1.get(), origin_b_); | 204 CreateFromParentPolicy(policy1.get(), origin_b_); |
| 205 std::unique_ptr<FeaturePolicy> policy3 = | 205 std::unique_ptr<FeaturePolicy> policy3 = |
| 206 CreateFromParentPolicy(policy2.get(), origin_a_); | 206 CreateFromParentPolicy(policy2.get(), origin_a_); |
| 207 EXPECT_FALSE(policy2->IsFeatureEnabled(kDefaultSelfFeature)); | 207 EXPECT_FALSE(policy2->IsFeatureEnabled(kDefaultSelfFeature)); |
| 208 EXPECT_FALSE(policy3->IsFeatureEnabled(kDefaultSelfFeature)); | 208 EXPECT_FALSE(policy3->IsFeatureEnabled(kDefaultSelfFeature)); |
| 209 } | 209 } |
| 210 | 210 |
| 211 TEST_F(FeaturePolicyTest, TestSelectiveFrameInheritance) { | 211 TEST_F(FeaturePolicyTest, TestSelectiveFrameInheritance) { |
| 212 // +------------------------------------------+ | 212 // +------------------------------------------+ |
| 213 // |(1) Origin A | | 213 // |(1) Origin A | |
| 214 // |Policy: {"default-self": ["Origin B"]} | | 214 // |Policy: {"default-self": ["Origin B"]} | |
| 215 // | +-----------------+ +-----------------+ | | 215 // | +-----------------+ +-----------------+ | |
| 216 // | |(2) Origin B | |(3) Origin C | | | 216 // | |(2) Origin B | |(3) Origin C | | |
| 217 // | |No Policy | |No Policy | | | 217 // | |No Policy | |No Policy | | |
| 218 // | | | | +-------------+ | | | 218 // | | | | +-------------+ | | |
| 219 // | | | | |(4)Origin B | | | | 219 // | | | | |(4)Origin B | | | |
| 220 // | | | | |No Policy | | | | 220 // | | | | |No Policy | | | |
| 221 // | | | | +-------------+ | | | 221 // | | | | +-------------+ | | |
| 222 // | +-----------------+ +-----------------+ | | 222 // | +-----------------+ +-----------------+ | |
| 223 // +------------------------------------------+ | 223 // +------------------------------------------+ |
| 224 // Feature should be enabled in second level Origin B frame, but disabled in | 224 // Feature should be enabled in second level Origin B frame, but disabled in |
| 225 // Frame 4, because it is embedded by frame 3, where the feature is not | 225 // Frame 4, because it is embedded by frame 3, where the feature is not |
| 226 // enabled. | 226 // enabled. |
| 227 std::unique_ptr<FeaturePolicy> policy1 = | 227 std::unique_ptr<FeaturePolicy> policy1 = |
| 228 CreateFromParentPolicy(nullptr, origin_a_); | 228 CreateFromParentPolicy(nullptr, origin_a_); |
| 229 policy1->SetHeaderPolicy({{{"default-self", false, {origin_b_}}}}); | 229 policy1->SetHeaderPolicy({{{kDefaultSelfFeature false, {origin_b_}}}}); |
| 230 std::unique_ptr<FeaturePolicy> policy2 = | 230 std::unique_ptr<FeaturePolicy> policy2 = |
| 231 CreateFromParentPolicy(policy1.get(), origin_b_); | 231 CreateFromParentPolicy(policy1.get(), origin_b_); |
| 232 std::unique_ptr<FeaturePolicy> policy3 = | 232 std::unique_ptr<FeaturePolicy> policy3 = |
| 233 CreateFromParentPolicy(policy1.get(), origin_c_); | 233 CreateFromParentPolicy(policy1.get(), origin_c_); |
| 234 std::unique_ptr<FeaturePolicy> policy4 = | 234 std::unique_ptr<FeaturePolicy> policy4 = |
| 235 CreateFromParentPolicy(policy3.get(), origin_b_); | 235 CreateFromParentPolicy(policy3.get(), origin_b_); |
| 236 EXPECT_TRUE(policy2->IsFeatureEnabled(kDefaultSelfFeature)); | 236 EXPECT_TRUE(policy2->IsFeatureEnabled(kDefaultSelfFeature)); |
| 237 EXPECT_FALSE(policy3->IsFeatureEnabled(kDefaultSelfFeature)); | 237 EXPECT_FALSE(policy3->IsFeatureEnabled(kDefaultSelfFeature)); |
| 238 EXPECT_FALSE(policy4->IsFeatureEnabled(kDefaultSelfFeature)); | 238 EXPECT_FALSE(policy4->IsFeatureEnabled(kDefaultSelfFeature)); |
| 239 } | 239 } |
| 240 | 240 |
| 241 TEST_F(FeaturePolicyTest, TestPolicyCanBlockSelf) { | 241 TEST_F(FeaturePolicyTest, TestPolicyCanBlockSelf) { |
| 242 // +----------------------------+ | 242 // +----------------------------+ |
| 243 // |(1)Origin A | | 243 // |(1)Origin A | |
| 244 // |Policy: {"default-on": []} | | 244 // |Policy: {"default-on": []} | |
| 245 // +----------------------------+ | 245 // +----------------------------+ |
| 246 // Default-on feature should be disabled in top-level frame. | 246 // Default-on feature should be disabled in top-level frame. |
| 247 std::unique_ptr<FeaturePolicy> policy1 = | 247 std::unique_ptr<FeaturePolicy> policy1 = |
| 248 CreateFromParentPolicy(nullptr, origin_a_); | 248 CreateFromParentPolicy(nullptr, origin_a_); |
| 249 policy1->SetHeaderPolicy( | 249 policy1->SetHeaderPolicy( |
| 250 {{{"default-on", false, std::vector<url::Origin>()}}}); | 250 {{{kDefaultOnFeature, false, std::vector<url::Origin>()}}}); |
| 251 EXPECT_FALSE(policy1->IsFeatureEnabled(kDefaultOnFeature)); | 251 EXPECT_FALSE(policy1->IsFeatureEnabled(kDefaultOnFeature)); |
| 252 } | 252 } |
| 253 | 253 |
| 254 TEST_F(FeaturePolicyTest, TestParentPolicyBlocksSameOriginChildPolicy) { | 254 TEST_F(FeaturePolicyTest, TestParentPolicyBlocksSameOriginChildPolicy) { |
| 255 // +----------------------------+ | 255 // +----------------------------+ |
| 256 // |(1)Origin A | | 256 // |(1)Origin A | |
| 257 // |Policy: {"default-on": []} | | 257 // |Policy: {"default-on": []} | |
| 258 // | +-------------+ | | 258 // | +-------------+ | |
| 259 // | |(2)Origin A | | | 259 // | |(2)Origin A | | |
| 260 // | |No Policy | | | 260 // | |No Policy | | |
| 261 // | +-------------+ | | 261 // | +-------------+ | |
| 262 // +----------------------------+ | 262 // +----------------------------+ |
| 263 // Feature should be disabled in child frame. | 263 // Feature should be disabled in child frame. |
| 264 std::unique_ptr<FeaturePolicy> policy1 = | 264 std::unique_ptr<FeaturePolicy> policy1 = |
| 265 CreateFromParentPolicy(nullptr, origin_a_); | 265 CreateFromParentPolicy(nullptr, origin_a_); |
| 266 policy1->SetHeaderPolicy( | 266 policy1->SetHeaderPolicy( |
| 267 {{{"default-on", false, std::vector<url::Origin>()}}}); | 267 {{{kDefaultOnFeature, false, std::vector<url::Origin>()}}}); |
| 268 std::unique_ptr<FeaturePolicy> policy2 = | 268 std::unique_ptr<FeaturePolicy> policy2 = |
| 269 CreateFromParentPolicy(policy1.get(), origin_a_); | 269 CreateFromParentPolicy(policy1.get(), origin_a_); |
| 270 EXPECT_FALSE(policy2->IsFeatureEnabled(kDefaultOnFeature)); | 270 EXPECT_FALSE(policy2->IsFeatureEnabled(kDefaultOnFeature)); |
| 271 } | 271 } |
| 272 | 272 |
| 273 TEST_F(FeaturePolicyTest, TestChildPolicyCanBlockSelf) { | 273 TEST_F(FeaturePolicyTest, TestChildPolicyCanBlockSelf) { |
| 274 // +--------------------------------+ | 274 // +--------------------------------+ |
| 275 // |(1)Origin A | | 275 // |(1)Origin A | |
| 276 // |No Policy | | 276 // |No Policy | |
| 277 // | +----------------------------+ | | 277 // | +----------------------------+ | |
| 278 // | |(2)Origin B | | | 278 // | |(2)Origin B | | |
| 279 // | |Policy: {"default-on": []} | | | 279 // | |Policy: {"default-on": []} | | |
| 280 // | +----------------------------+ | | 280 // | +----------------------------+ | |
| 281 // +--------------------------------+ | 281 // +--------------------------------+ |
| 282 // Default-on feature should be disabled by cross-origin child frame. | 282 // Default-on feature should be disabled by cross-origin child frame. |
| 283 std::unique_ptr<FeaturePolicy> policy1 = | 283 std::unique_ptr<FeaturePolicy> policy1 = |
| 284 CreateFromParentPolicy(nullptr, origin_a_); | 284 CreateFromParentPolicy(nullptr, origin_a_); |
| 285 std::unique_ptr<FeaturePolicy> policy2 = | 285 std::unique_ptr<FeaturePolicy> policy2 = |
| 286 CreateFromParentPolicy(policy1.get(), origin_b_); | 286 CreateFromParentPolicy(policy1.get(), origin_b_); |
| 287 policy2->SetHeaderPolicy( | 287 policy2->SetHeaderPolicy( |
| 288 {{{"default-on", false, std::vector<url::Origin>()}}}); | 288 {{{kDefaultOnFeature, false, std::vector<url::Origin>()}}}); |
| 289 EXPECT_FALSE(policy2->IsFeatureEnabled(kDefaultOnFeature)); | 289 EXPECT_FALSE(policy2->IsFeatureEnabled(kDefaultOnFeature)); |
| 290 } | 290 } |
| 291 | 291 |
| 292 TEST_F(FeaturePolicyTest, TestChildPolicyCanBlockChildren) { | 292 TEST_F(FeaturePolicyTest, TestChildPolicyCanBlockChildren) { |
| 293 // +--------------------------------------+ | 293 // +--------------------------------------+ |
| 294 // |(1)Origin A | | 294 // |(1)Origin A | |
| 295 // |No Policy | | 295 // |No Policy | |
| 296 // | +----------------------------------+ | | 296 // | +----------------------------------+ | |
| 297 // | |(2)Origin B | | | 297 // | |(2)Origin B | | |
| 298 // | |Policy: {"default-on": ["self"]} | | | 298 // | |Policy: {"default-on": ["self"]} | | |
| 299 // | | +-------------+ | | | 299 // | | +-------------+ | | |
| 300 // | | |(3)Origin C | | | | 300 // | | |(3)Origin C | | | |
| 301 // | | |No Policy | | | | 301 // | | |No Policy | | | |
| 302 // | | +-------------+ | | | 302 // | | +-------------+ | | |
| 303 // | +----------------------------------+ | | 303 // | +----------------------------------+ | |
| 304 // +--------------------------------------+ | 304 // +--------------------------------------+ |
| 305 // Default-on feature should be enabled in frames 1 and 2; disabled in frame | 305 // Default-on feature should be enabled in frames 1 and 2; disabled in frame |
| 306 // 3 by child frame policy. | 306 // 3 by child frame policy. |
| 307 std::unique_ptr<FeaturePolicy> policy1 = | 307 std::unique_ptr<FeaturePolicy> policy1 = |
| 308 CreateFromParentPolicy(nullptr, origin_a_); | 308 CreateFromParentPolicy(nullptr, origin_a_); |
| 309 std::unique_ptr<FeaturePolicy> policy2 = | 309 std::unique_ptr<FeaturePolicy> policy2 = |
| 310 CreateFromParentPolicy(policy1.get(), origin_b_); | 310 CreateFromParentPolicy(policy1.get(), origin_b_); |
| 311 policy2->SetHeaderPolicy({{{"default-on", false, {origin_b_}}}}); | 311 policy2->SetHeaderPolicy({{{kDefaultOnFeature, false, {origin_b_}}}}); |
| 312 std::unique_ptr<FeaturePolicy> policy3 = | 312 std::unique_ptr<FeaturePolicy> policy3 = |
| 313 CreateFromParentPolicy(policy2.get(), origin_c_); | 313 CreateFromParentPolicy(policy2.get(), origin_c_); |
| 314 EXPECT_TRUE(policy2->IsFeatureEnabled(kDefaultOnFeature)); | 314 EXPECT_TRUE(policy2->IsFeatureEnabled(kDefaultOnFeature)); |
| 315 EXPECT_FALSE(policy3->IsFeatureEnabled(kDefaultOnFeature)); | 315 EXPECT_FALSE(policy3->IsFeatureEnabled(kDefaultOnFeature)); |
| 316 } | 316 } |
| 317 | 317 |
| 318 TEST_F(FeaturePolicyTest, TestParentPolicyBlocksCrossOriginChildPolicy) { | 318 TEST_F(FeaturePolicyTest, TestParentPolicyBlocksCrossOriginChildPolicy) { |
| 319 // +----------------------------+ | 319 // +----------------------------+ |
| 320 // |(1)Origin A | | 320 // |(1)Origin A | |
| 321 // |Policy: {"default-on": []} | | 321 // |Policy: {"default-on": []} | |
| 322 // | +-------------+ | | 322 // | +-------------+ | |
| 323 // | |(2)Origin B | | | 323 // | |(2)Origin B | | |
| 324 // | |No Policy | | | 324 // | |No Policy | | |
| 325 // | +-------------+ | | 325 // | +-------------+ | |
| 326 // +----------------------------+ | 326 // +----------------------------+ |
| 327 // Default-on feature should be disabled in cross-origin child frame. | 327 // Default-on feature should be disabled in cross-origin child frame. |
| 328 std::unique_ptr<FeaturePolicy> policy1 = | 328 std::unique_ptr<FeaturePolicy> policy1 = |
| 329 CreateFromParentPolicy(nullptr, origin_a_); | 329 CreateFromParentPolicy(nullptr, origin_a_); |
| 330 policy1->SetHeaderPolicy( | 330 policy1->SetHeaderPolicy( |
| 331 {{{"default-on", false, std::vector<url::Origin>()}}}); | 331 {{{kDefaultOnFeature, false, std::vector<url::Origin>()}}}); |
| 332 std::unique_ptr<FeaturePolicy> policy2 = | 332 std::unique_ptr<FeaturePolicy> policy2 = |
| 333 CreateFromParentPolicy(policy1.get(), origin_b_); | 333 CreateFromParentPolicy(policy1.get(), origin_b_); |
| 334 EXPECT_FALSE(policy2->IsFeatureEnabled(kDefaultOnFeature)); | 334 EXPECT_FALSE(policy2->IsFeatureEnabled(kDefaultOnFeature)); |
| 335 } | 335 } |
| 336 | 336 |
| 337 TEST_F(FeaturePolicyTest, TestEnableForAllOrigins) { | 337 TEST_F(FeaturePolicyTest, TestEnableForAllOrigins) { |
| 338 // +--------------------------------+ | 338 // +--------------------------------+ |
| 339 // |(1) Origin A | | 339 // |(1) Origin A | |
| 340 // |Policy: {"default-self": ["*"]} | | 340 // |Policy: {"default-self": ["*"]} | |
| 341 // | +-----------------+ | | 341 // | +-----------------+ | |
| 342 // | |(2) Origin B | | | 342 // | |(2) Origin B | | |
| 343 // | |No Policy | | | 343 // | |No Policy | | |
| 344 // | | +-------------+ | | | 344 // | | +-------------+ | | |
| 345 // | | |(3)Origin A | | | | 345 // | | |(3)Origin A | | | |
| 346 // | | |No Policy | | | | 346 // | | |No Policy | | | |
| 347 // | | +-------------+ | | | 347 // | | +-------------+ | | |
| 348 // | +-----------------+ | | 348 // | +-----------------+ | |
| 349 // +--------------------------------+ | 349 // +--------------------------------+ |
| 350 // Feature should be enabled in top and second level; disabled in frame 3. | 350 // Feature should be enabled in top and second level; disabled in frame 3. |
| 351 std::unique_ptr<FeaturePolicy> policy1 = | 351 std::unique_ptr<FeaturePolicy> policy1 = |
| 352 CreateFromParentPolicy(nullptr, origin_a_); | 352 CreateFromParentPolicy(nullptr, origin_a_); |
| 353 policy1->SetHeaderPolicy( | 353 policy1->SetHeaderPolicy( |
| 354 {{{"default-self", true, std::vector<url::Origin>()}}}); | 354 {{{kDefaultSelfFeature true, std::vector<url::Origin>()}}}); |
| 355 std::unique_ptr<FeaturePolicy> policy2 = | 355 std::unique_ptr<FeaturePolicy> policy2 = |
| 356 CreateFromParentPolicy(policy1.get(), origin_b_); | 356 CreateFromParentPolicy(policy1.get(), origin_b_); |
| 357 std::unique_ptr<FeaturePolicy> policy3 = | 357 std::unique_ptr<FeaturePolicy> policy3 = |
| 358 CreateFromParentPolicy(policy2.get(), origin_a_); | 358 CreateFromParentPolicy(policy2.get(), origin_a_); |
| 359 EXPECT_TRUE(policy1->IsFeatureEnabled(kDefaultSelfFeature)); | 359 EXPECT_TRUE(policy1->IsFeatureEnabled(kDefaultSelfFeature)); |
| 360 EXPECT_TRUE(policy2->IsFeatureEnabled(kDefaultSelfFeature)); | 360 EXPECT_TRUE(policy2->IsFeatureEnabled(kDefaultSelfFeature)); |
| 361 EXPECT_FALSE(policy3->IsFeatureEnabled(kDefaultSelfFeature)); | 361 EXPECT_FALSE(policy3->IsFeatureEnabled(kDefaultSelfFeature)); |
| 362 } | 362 } |
| 363 | 363 |
| 364 TEST_F(FeaturePolicyTest, TestDefaultOnEnablesForAllAncestors) { | 364 TEST_F(FeaturePolicyTest, TestDefaultOnEnablesForAllAncestors) { |
| 365 // +---------------------------------------+ | 365 // +---------------------------------------+ |
| 366 // |(1) Origin A | | 366 // |(1) Origin A | |
| 367 // |Policy: {"default-on": ["Origin B"]} | | 367 // |Policy: {"default-on": ["Origin B"]} | |
| 368 // | +-----------------------------------+ | | 368 // | +-----------------------------------+ | |
| 369 // | |(2) Origin B | | | 369 // | |(2) Origin B | | |
| 370 // | |No Policy | | | 370 // | |No Policy | | |
| 371 // | | +-------------+ +-------------+ | | | 371 // | | +-------------+ +-------------+ | | |
| 372 // | | |(3)Origin B | |(4)Origin C | | | | 372 // | | |(3)Origin B | |(4)Origin C | | | |
| 373 // | | |No Policy | |No Policy | | | | 373 // | | |No Policy | |No Policy | | | |
| 374 // | | +-------------+ +-------------+ | | | 374 // | | +-------------+ +-------------+ | | |
| 375 // | +-----------------------------------+ | | 375 // | +-----------------------------------+ | |
| 376 // +---------------------------------------+ | 376 // +---------------------------------------+ |
| 377 // Feature should be disabled in frame 1; enabled in frames 2, 3 and 4. | 377 // Feature should be disabled in frame 1; enabled in frames 2, 3 and 4. |
| 378 std::unique_ptr<FeaturePolicy> policy1 = | 378 std::unique_ptr<FeaturePolicy> policy1 = |
| 379 CreateFromParentPolicy(nullptr, origin_a_); | 379 CreateFromParentPolicy(nullptr, origin_a_); |
| 380 policy1->SetHeaderPolicy({{{"default-on", false, {origin_b_}}}}); | 380 policy1->SetHeaderPolicy({{{kDefaultOnFeature, false, {origin_b_}}}}); |
| 381 std::unique_ptr<FeaturePolicy> policy2 = | 381 std::unique_ptr<FeaturePolicy> policy2 = |
| 382 CreateFromParentPolicy(policy1.get(), origin_b_); | 382 CreateFromParentPolicy(policy1.get(), origin_b_); |
| 383 std::unique_ptr<FeaturePolicy> policy3 = | 383 std::unique_ptr<FeaturePolicy> policy3 = |
| 384 CreateFromParentPolicy(policy2.get(), origin_b_); | 384 CreateFromParentPolicy(policy2.get(), origin_b_); |
| 385 std::unique_ptr<FeaturePolicy> policy4 = | 385 std::unique_ptr<FeaturePolicy> policy4 = |
| 386 CreateFromParentPolicy(policy2.get(), origin_c_); | 386 CreateFromParentPolicy(policy2.get(), origin_c_); |
| 387 EXPECT_FALSE(policy1->IsFeatureEnabled(kDefaultOnFeature)); | 387 EXPECT_FALSE(policy1->IsFeatureEnabled(kDefaultOnFeature)); |
| 388 EXPECT_TRUE(policy2->IsFeatureEnabled(kDefaultOnFeature)); | 388 EXPECT_TRUE(policy2->IsFeatureEnabled(kDefaultOnFeature)); |
| 389 EXPECT_TRUE(policy3->IsFeatureEnabled(kDefaultOnFeature)); | 389 EXPECT_TRUE(policy3->IsFeatureEnabled(kDefaultOnFeature)); |
| 390 EXPECT_TRUE(policy4->IsFeatureEnabled(kDefaultOnFeature)); | 390 EXPECT_TRUE(policy4->IsFeatureEnabled(kDefaultOnFeature)); |
| 391 } | 391 } |
| 392 | 392 |
| 393 TEST_F(FeaturePolicyTest, TestDefaultSelfRespectsSameOriginEmbedding) { | 393 TEST_F(FeaturePolicyTest, TestDefaultSelfRespectsSameOriginEmbedding) { |
| 394 // +---------------------------------------+ | 394 // +---------------------------------------+ |
| 395 // |(1) Origin A | | 395 // |(1) Origin A | |
| 396 // |Policy: {"default-self": ["Origin B"]} | | 396 // |Policy: {"default-self": ["Origin B"]} | |
| 397 // | +-----------------------------------+ | | 397 // | +-----------------------------------+ | |
| 398 // | |(2) Origin B | | | 398 // | |(2) Origin B | | |
| 399 // | |No Policy | | | 399 // | |No Policy | | |
| 400 // | | +-------------+ +-------------+ | | | 400 // | | +-------------+ +-------------+ | | |
| 401 // | | |(3)Origin B | |(4)Origin C | | | | 401 // | | |(3)Origin B | |(4)Origin C | | | |
| 402 // | | |No Policy | |No Policy | | | | 402 // | | |No Policy | |No Policy | | | |
| 403 // | | +-------------+ +-------------+ | | | 403 // | | +-------------+ +-------------+ | | |
| 404 // | +-----------------------------------+ | | 404 // | +-----------------------------------+ | |
| 405 // +---------------------------------------+ | 405 // +---------------------------------------+ |
| 406 // Feature should be disabled in frames 1 and 4; enabled in frames 2 and 3. | 406 // Feature should be disabled in frames 1 and 4; enabled in frames 2 and 3. |
| 407 std::unique_ptr<FeaturePolicy> policy1 = | 407 std::unique_ptr<FeaturePolicy> policy1 = |
| 408 CreateFromParentPolicy(nullptr, origin_a_); | 408 CreateFromParentPolicy(nullptr, origin_a_); |
| 409 policy1->SetHeaderPolicy({{{"default-self", false, {origin_b_}}}}); | 409 policy1->SetHeaderPolicy({{{kDefaultSelfFeature false, {origin_b_}}}}); |
| 410 std::unique_ptr<FeaturePolicy> policy2 = | 410 std::unique_ptr<FeaturePolicy> policy2 = |
| 411 CreateFromParentPolicy(policy1.get(), origin_b_); | 411 CreateFromParentPolicy(policy1.get(), origin_b_); |
| 412 std::unique_ptr<FeaturePolicy> policy3 = | 412 std::unique_ptr<FeaturePolicy> policy3 = |
| 413 CreateFromParentPolicy(policy2.get(), origin_b_); | 413 CreateFromParentPolicy(policy2.get(), origin_b_); |
| 414 std::unique_ptr<FeaturePolicy> policy4 = | 414 std::unique_ptr<FeaturePolicy> policy4 = |
| 415 CreateFromParentPolicy(policy2.get(), origin_c_); | 415 CreateFromParentPolicy(policy2.get(), origin_c_); |
| 416 EXPECT_FALSE(policy1->IsFeatureEnabled(kDefaultSelfFeature)); | 416 EXPECT_FALSE(policy1->IsFeatureEnabled(kDefaultSelfFeature)); |
| 417 EXPECT_TRUE(policy2->IsFeatureEnabled(kDefaultSelfFeature)); | 417 EXPECT_TRUE(policy2->IsFeatureEnabled(kDefaultSelfFeature)); |
| 418 EXPECT_TRUE(policy3->IsFeatureEnabled(kDefaultSelfFeature)); | 418 EXPECT_TRUE(policy3->IsFeatureEnabled(kDefaultSelfFeature)); |
| 419 EXPECT_FALSE(policy4->IsFeatureEnabled(kDefaultSelfFeature)); | 419 EXPECT_FALSE(policy4->IsFeatureEnabled(kDefaultSelfFeature)); |
| 420 } | 420 } |
| 421 | 421 |
| 422 TEST_F(FeaturePolicyTest, TestDefaultOffMustBeDelegatedToAllCrossOriginFrames) { | 422 TEST_F(FeaturePolicyTest, TestDefaultOffMustBeDelegatedToAllCrossOriginFrames) { |
| 423 // +------------------------------------------------------------+ | 423 // +------------------------------------------------------------+ |
| 424 // |(1) Origin A | | 424 // |(1) Origin A | |
| 425 // |Policy: {"default-off": ["Origin B"]} | | 425 // |Policy: {"default-off": ["Origin B"]} | |
| 426 // | +--------------------------------------------------------+ | | 426 // | +--------------------------------------------------------+ | |
| 427 // | |(2) Origin B | | | 427 // | |(2) Origin B | | |
| 428 // | |Policy: {"default-off": ["self"]} | | | 428 // | |Policy: {"default-off": ["self"]} | | |
| 429 // | | +-------------+ +----------------------------------+ | | | 429 // | | +-------------+ +----------------------------------+ | | |
| 430 // | | |(3)Origin B | |(4)Origin C | | | | 430 // | | |(3)Origin B | |(4)Origin C | | | |
| 431 // | | |No Policy | |Policy: {"default-off": ["self"]} | | | | 431 // | | |No Policy | |Policy: {"default-off": ["self"]} | | | |
| 432 // | | +-------------+ +----------------------------------+ | | | 432 // | | +-------------+ +----------------------------------+ | | |
| 433 // | +--------------------------------------------------------+ | | 433 // | +--------------------------------------------------------+ | |
| 434 // +------------------------------------------------------------+ | 434 // +------------------------------------------------------------+ |
| 435 // Feature should be disabled in frames 1, 3 and 4; enabled in frame 2 only. | 435 // Feature should be disabled in frames 1, 3 and 4; enabled in frame 2 only. |
| 436 std::unique_ptr<FeaturePolicy> policy1 = | 436 std::unique_ptr<FeaturePolicy> policy1 = |
| 437 CreateFromParentPolicy(nullptr, origin_a_); | 437 CreateFromParentPolicy(nullptr, origin_a_); |
| 438 policy1->SetHeaderPolicy({{{"default-off", false, {origin_b_}}}}); | 438 policy1->SetHeaderPolicy({{{kDefaultOffFeature, false, {origin_b_}}}}); |
| 439 std::unique_ptr<FeaturePolicy> policy2 = | 439 std::unique_ptr<FeaturePolicy> policy2 = |
| 440 CreateFromParentPolicy(policy1.get(), origin_b_); | 440 CreateFromParentPolicy(policy1.get(), origin_b_); |
| 441 policy2->SetHeaderPolicy({{{"default-off", false, {origin_b_}}}}); | 441 policy2->SetHeaderPolicy({{{kDefaultOffFeature, false, {origin_b_}}}}); |
| 442 std::unique_ptr<FeaturePolicy> policy3 = | 442 std::unique_ptr<FeaturePolicy> policy3 = |
| 443 CreateFromParentPolicy(policy2.get(), origin_b_); | 443 CreateFromParentPolicy(policy2.get(), origin_b_); |
| 444 std::unique_ptr<FeaturePolicy> policy4 = | 444 std::unique_ptr<FeaturePolicy> policy4 = |
| 445 CreateFromParentPolicy(policy2.get(), origin_c_); | 445 CreateFromParentPolicy(policy2.get(), origin_c_); |
| 446 policy4->SetHeaderPolicy({{{"default-off", false, {origin_c_}}}}); | 446 policy4->SetHeaderPolicy({{{kDefaultOffFeature, false, {origin_c_}}}}); |
| 447 EXPECT_FALSE(policy1->IsFeatureEnabled(kDefaultOffFeature)); | 447 EXPECT_FALSE(policy1->IsFeatureEnabled(kDefaultOffFeature)); |
| 448 EXPECT_TRUE(policy2->IsFeatureEnabled(kDefaultOffFeature)); | 448 EXPECT_TRUE(policy2->IsFeatureEnabled(kDefaultOffFeature)); |
| 449 EXPECT_FALSE(policy3->IsFeatureEnabled(kDefaultOffFeature)); | 449 EXPECT_FALSE(policy3->IsFeatureEnabled(kDefaultOffFeature)); |
| 450 EXPECT_FALSE(policy4->IsFeatureEnabled(kDefaultOffFeature)); | 450 EXPECT_FALSE(policy4->IsFeatureEnabled(kDefaultOffFeature)); |
| 451 } | 451 } |
| 452 | 452 |
| 453 TEST_F(FeaturePolicyTest, TestReenableForAllOrigins) { | 453 TEST_F(FeaturePolicyTest, TestReenableForAllOrigins) { |
| 454 // +------------------------------------+ | 454 // +------------------------------------+ |
| 455 // |(1) Origin A | | 455 // |(1) Origin A | |
| 456 // |Policy: {"default-self": ["*"]} | | 456 // |Policy: {"default-self": ["*"]} | |
| 457 // | +--------------------------------+ | | 457 // | +--------------------------------+ | |
| 458 // | |(2) Origin B | | | 458 // | |(2) Origin B | | |
| 459 // | |Policy: {"default-self": ["*"]} | | | 459 // | |Policy: {"default-self": ["*"]} | | |
| 460 // | | +-------------+ | | | 460 // | | +-------------+ | | |
| 461 // | | |(3)Origin A | | | | 461 // | | |(3)Origin A | | | |
| 462 // | | |No Policy | | | | 462 // | | |No Policy | | | |
| 463 // | | +-------------+ | | | 463 // | | +-------------+ | | |
| 464 // | +--------------------------------+ | | 464 // | +--------------------------------+ | |
| 465 // +------------------------------------+ | 465 // +------------------------------------+ |
| 466 // Feature should be enabled in all frames. | 466 // Feature should be enabled in all frames. |
| 467 std::unique_ptr<FeaturePolicy> policy1 = | 467 std::unique_ptr<FeaturePolicy> policy1 = |
| 468 CreateFromParentPolicy(nullptr, origin_a_); | 468 CreateFromParentPolicy(nullptr, origin_a_); |
| 469 policy1->SetHeaderPolicy( | 469 policy1->SetHeaderPolicy( |
| 470 {{{"default-self", true, std::vector<url::Origin>()}}}); | 470 {{{kDefaultSelfFeature true, std::vector<url::Origin>()}}}); |
| 471 std::unique_ptr<FeaturePolicy> policy2 = | 471 std::unique_ptr<FeaturePolicy> policy2 = |
| 472 CreateFromParentPolicy(policy1.get(), origin_b_); | 472 CreateFromParentPolicy(policy1.get(), origin_b_); |
| 473 policy2->SetHeaderPolicy( | 473 policy2->SetHeaderPolicy( |
| 474 {{{"default-self", true, std::vector<url::Origin>()}}}); | 474 {{{kDefaultSelfFeature true, std::vector<url::Origin>()}}}); |
| 475 std::unique_ptr<FeaturePolicy> policy3 = | 475 std::unique_ptr<FeaturePolicy> policy3 = |
| 476 CreateFromParentPolicy(policy2.get(), origin_a_); | 476 CreateFromParentPolicy(policy2.get(), origin_a_); |
| 477 EXPECT_TRUE(policy1->IsFeatureEnabled(kDefaultSelfFeature)); | 477 EXPECT_TRUE(policy1->IsFeatureEnabled(kDefaultSelfFeature)); |
| 478 EXPECT_TRUE(policy2->IsFeatureEnabled(kDefaultSelfFeature)); | 478 EXPECT_TRUE(policy2->IsFeatureEnabled(kDefaultSelfFeature)); |
| 479 EXPECT_TRUE(policy3->IsFeatureEnabled(kDefaultSelfFeature)); | 479 EXPECT_TRUE(policy3->IsFeatureEnabled(kDefaultSelfFeature)); |
| 480 } | 480 } |
| 481 | 481 |
| 482 TEST_F(FeaturePolicyTest, TestBlockedFrameCannotReenable) { | 482 TEST_F(FeaturePolicyTest, TestBlockedFrameCannotReenable) { |
| 483 // +--------------------------------------+ | 483 // +--------------------------------------+ |
| 484 // |(1)Origin A | | 484 // |(1)Origin A | |
| 485 // |Policy: {"default-self": ["self"]} | | 485 // |Policy: {"default-self": ["self"]} | |
| 486 // | +----------------------------------+ | | 486 // | +----------------------------------+ | |
| 487 // | |(2)Origin B | | | 487 // | |(2)Origin B | | |
| 488 // | |Policy: {"default-self": ["*"]} | | | 488 // | |Policy: {"default-self": ["*"]} | | |
| 489 // | | +-------------+ +-------------+ | | | 489 // | | +-------------+ +-------------+ | | |
| 490 // | | |(3)Origin A | |(4)Origin C | | | | 490 // | | |(3)Origin A | |(4)Origin C | | | |
| 491 // | | |No Policy | |No Policy | | | | 491 // | | |No Policy | |No Policy | | | |
| 492 // | | +-------------+ +-------------+ | | | 492 // | | +-------------+ +-------------+ | | |
| 493 // | +----------------------------------+ | | 493 // | +----------------------------------+ | |
| 494 // +--------------------------------------+ | 494 // +--------------------------------------+ |
| 495 // Feature should be enabled at the top level; disabled in all other frames. | 495 // Feature should be enabled at the top level; disabled in all other frames. |
| 496 std::unique_ptr<FeaturePolicy> policy1 = | 496 std::unique_ptr<FeaturePolicy> policy1 = |
| 497 CreateFromParentPolicy(nullptr, origin_a_); | 497 CreateFromParentPolicy(nullptr, origin_a_); |
| 498 policy1->SetHeaderPolicy({{{"default-self", false, {origin_a_}}}}); | 498 policy1->SetHeaderPolicy({{{kDefaultSelfFeature false, {origin_a_}}}}); |
| 499 std::unique_ptr<FeaturePolicy> policy2 = | 499 std::unique_ptr<FeaturePolicy> policy2 = |
| 500 CreateFromParentPolicy(policy1.get(), origin_b_); | 500 CreateFromParentPolicy(policy1.get(), origin_b_); |
| 501 policy2->SetHeaderPolicy( | 501 policy2->SetHeaderPolicy( |
| 502 {{{"default-self", true, std::vector<url::Origin>()}}}); | 502 {{{kDefaultSelfFeature true, std::vector<url::Origin>()}}}); |
| 503 std::unique_ptr<FeaturePolicy> policy3 = | 503 std::unique_ptr<FeaturePolicy> policy3 = |
| 504 CreateFromParentPolicy(policy2.get(), origin_a_); | 504 CreateFromParentPolicy(policy2.get(), origin_a_); |
| 505 std::unique_ptr<FeaturePolicy> policy4 = | 505 std::unique_ptr<FeaturePolicy> policy4 = |
| 506 CreateFromParentPolicy(policy2.get(), origin_c_); | 506 CreateFromParentPolicy(policy2.get(), origin_c_); |
| 507 EXPECT_TRUE(policy1->IsFeatureEnabled(kDefaultSelfFeature)); | 507 EXPECT_TRUE(policy1->IsFeatureEnabled(kDefaultSelfFeature)); |
| 508 EXPECT_FALSE(policy2->IsFeatureEnabled(kDefaultSelfFeature)); | 508 EXPECT_FALSE(policy2->IsFeatureEnabled(kDefaultSelfFeature)); |
| 509 EXPECT_FALSE(policy3->IsFeatureEnabled(kDefaultSelfFeature)); | 509 EXPECT_FALSE(policy3->IsFeatureEnabled(kDefaultSelfFeature)); |
| 510 EXPECT_FALSE(policy4->IsFeatureEnabled(kDefaultSelfFeature)); | 510 EXPECT_FALSE(policy4->IsFeatureEnabled(kDefaultSelfFeature)); |
| 511 } | 511 } |
| 512 | 512 |
| 513 TEST_F(FeaturePolicyTest, TestEnabledFrameCanDelegate) { | 513 TEST_F(FeaturePolicyTest, TestEnabledFrameCanDelegate) { |
| 514 // +---------------------------------------------------+ | 514 // +---------------------------------------------------+ |
| 515 // |(1) Origin A | | 515 // |(1) Origin A | |
| 516 // |Policy: {"default-self": ["self", "Origin B"]} | | 516 // |Policy: {"default-self": ["self", "Origin B"]} | |
| 517 // | +-----------------------------------------------+ | | 517 // | +-----------------------------------------------+ | |
| 518 // | |(2) Origin B | | | 518 // | |(2) Origin B | | |
| 519 // | |Policy: {"default-self": ["self", "Origin C"]} | | | 519 // | |Policy: {"default-self": ["self", "Origin C"]} | | |
| 520 // | | +-------------+ | | | 520 // | | +-------------+ | | |
| 521 // | | |(3)Origin C | | | | 521 // | | |(3)Origin C | | | |
| 522 // | | |No Policy | | | | 522 // | | |No Policy | | | |
| 523 // | | +-------------+ | | | 523 // | | +-------------+ | | |
| 524 // | +-----------------------------------------------+ | | 524 // | +-----------------------------------------------+ | |
| 525 // +---------------------------------------------------+ | 525 // +---------------------------------------------------+ |
| 526 // Feature should be enabled in all frames. | 526 // Feature should be enabled in all frames. |
| 527 std::unique_ptr<FeaturePolicy> policy1 = | 527 std::unique_ptr<FeaturePolicy> policy1 = |
| 528 CreateFromParentPolicy(nullptr, origin_a_); | 528 CreateFromParentPolicy(nullptr, origin_a_); |
| 529 policy1->SetHeaderPolicy({{{"default-self", false, {origin_a_, origin_b_}}}}); | 529 policy1->SetHeaderPolicy( |
| 530 {{{kDefaultSelfFeature false, {origin_a_, origin_b_}}}}); |
| 530 std::unique_ptr<FeaturePolicy> policy2 = | 531 std::unique_ptr<FeaturePolicy> policy2 = |
| 531 CreateFromParentPolicy(policy1.get(), origin_b_); | 532 CreateFromParentPolicy(policy1.get(), origin_b_); |
| 532 policy2->SetHeaderPolicy({{{"default-self", false, {origin_b_, origin_c_}}}}); | 533 policy2->SetHeaderPolicy( |
| 534 {{{kDefaultSelfFeature false, {origin_b_, origin_c_}}}}); |
| 533 std::unique_ptr<FeaturePolicy> policy3 = | 535 std::unique_ptr<FeaturePolicy> policy3 = |
| 534 CreateFromParentPolicy(policy2.get(), origin_c_); | 536 CreateFromParentPolicy(policy2.get(), origin_c_); |
| 535 EXPECT_TRUE(policy1->IsFeatureEnabled(kDefaultSelfFeature)); | 537 EXPECT_TRUE(policy1->IsFeatureEnabled(kDefaultSelfFeature)); |
| 536 EXPECT_TRUE(policy2->IsFeatureEnabled(kDefaultSelfFeature)); | 538 EXPECT_TRUE(policy2->IsFeatureEnabled(kDefaultSelfFeature)); |
| 537 EXPECT_TRUE(policy3->IsFeatureEnabled(kDefaultSelfFeature)); | 539 EXPECT_TRUE(policy3->IsFeatureEnabled(kDefaultSelfFeature)); |
| 538 } | 540 } |
| 539 | 541 |
| 540 TEST_F(FeaturePolicyTest, TestEnabledFrameCanDelegateByDefault) { | 542 TEST_F(FeaturePolicyTest, TestEnabledFrameCanDelegateByDefault) { |
| 541 // +-----------------------------------------------+ | 543 // +-----------------------------------------------+ |
| 542 // |(1) Origin A | | 544 // |(1) Origin A | |
| 543 // |Policy: {"default-on": ["self", "Origin B"]} | | 545 // |Policy: {"default-on": ["self", "Origin B"]} | |
| 544 // | +--------------------+ +--------------------+ | | 546 // | +--------------------+ +--------------------+ | |
| 545 // | |(2) Origin B | | (4) Origin C | | | 547 // | |(2) Origin B | | (4) Origin C | | |
| 546 // | |No Policy | | No Policy | | | 548 // | |No Policy | | No Policy | | |
| 547 // | | +-------------+ | | | | | 549 // | | +-------------+ | | | | |
| 548 // | | |(3)Origin C | | | | | | 550 // | | |(3)Origin C | | | | | |
| 549 // | | |No Policy | | | | | | 551 // | | |No Policy | | | | | |
| 550 // | | +-------------+ | | | | | 552 // | | +-------------+ | | | | |
| 551 // | +--------------------+ +--------------------+ | | 553 // | +--------------------+ +--------------------+ | |
| 552 // +-----------------------------------------------+ | 554 // +-----------------------------------------------+ |
| 553 // Feature should be enabled in frames 1, 2, and 3, and disabled in frame 4. | 555 // Feature should be enabled in frames 1, 2, and 3, and disabled in frame 4. |
| 554 std::unique_ptr<FeaturePolicy> policy1 = | 556 std::unique_ptr<FeaturePolicy> policy1 = |
| 555 CreateFromParentPolicy(nullptr, origin_a_); | 557 CreateFromParentPolicy(nullptr, origin_a_); |
| 556 policy1->SetHeaderPolicy({{{"default-on", false, {origin_a_, origin_b_}}}}); | 558 policy1->SetHeaderPolicy( |
| 559 {{{kDefaultOnFeature, false, {origin_a_, origin_b_}}}}); |
| 557 std::unique_ptr<FeaturePolicy> policy2 = | 560 std::unique_ptr<FeaturePolicy> policy2 = |
| 558 CreateFromParentPolicy(policy1.get(), origin_b_); | 561 CreateFromParentPolicy(policy1.get(), origin_b_); |
| 559 std::unique_ptr<FeaturePolicy> policy3 = | 562 std::unique_ptr<FeaturePolicy> policy3 = |
| 560 CreateFromParentPolicy(policy2.get(), origin_c_); | 563 CreateFromParentPolicy(policy2.get(), origin_c_); |
| 561 std::unique_ptr<FeaturePolicy> policy4 = | 564 std::unique_ptr<FeaturePolicy> policy4 = |
| 562 CreateFromParentPolicy(policy1.get(), origin_c_); | 565 CreateFromParentPolicy(policy1.get(), origin_c_); |
| 563 EXPECT_TRUE(policy1->IsFeatureEnabled(kDefaultOnFeature)); | 566 EXPECT_TRUE(policy1->IsFeatureEnabled(kDefaultOnFeature)); |
| 564 EXPECT_TRUE(policy2->IsFeatureEnabled(kDefaultOnFeature)); | 567 EXPECT_TRUE(policy2->IsFeatureEnabled(kDefaultOnFeature)); |
| 565 EXPECT_TRUE(policy3->IsFeatureEnabled(kDefaultOnFeature)); | 568 EXPECT_TRUE(policy3->IsFeatureEnabled(kDefaultOnFeature)); |
| 566 EXPECT_FALSE(policy4->IsFeatureEnabled(kDefaultOnFeature)); | 569 EXPECT_FALSE(policy4->IsFeatureEnabled(kDefaultOnFeature)); |
| 567 } | 570 } |
| 568 | 571 |
| 569 TEST_F(FeaturePolicyTest, TestNonNestedFeaturesDontDelegateByDefault) { | 572 TEST_F(FeaturePolicyTest, TestNonNestedFeaturesDontDelegateByDefault) { |
| 570 // +-----------------------------------------------+ | 573 // +-----------------------------------------------+ |
| 571 // |(1) Origin A | | 574 // |(1) Origin A | |
| 572 // |Policy: {"default-self": ["self", "Origin B"]} | | 575 // |Policy: {"default-self": ["self", "Origin B"]} | |
| 573 // | +--------------------+ +--------------------+ | | 576 // | +--------------------+ +--------------------+ | |
| 574 // | |(2) Origin B | | (4) Origin C | | | 577 // | |(2) Origin B | | (4) Origin C | | |
| 575 // | |No Policy | | No Policy | | | 578 // | |No Policy | | No Policy | | |
| 576 // | | +-------------+ | | | | | 579 // | | +-------------+ | | | | |
| 577 // | | |(3)Origin C | | | | | | 580 // | | |(3)Origin C | | | | | |
| 578 // | | |No Policy | | | | | | 581 // | | |No Policy | | | | | |
| 579 // | | +-------------+ | | | | | 582 // | | +-------------+ | | | | |
| 580 // | +--------------------+ +--------------------+ | | 583 // | +--------------------+ +--------------------+ | |
| 581 // +-----------------------------------------------+ | 584 // +-----------------------------------------------+ |
| 582 // Feature should be enabled in frames 1 and 2, and disabled in frames 3 and | 585 // Feature should be enabled in frames 1 and 2, and disabled in frames 3 and |
| 583 // 4. | 586 // 4. |
| 584 std::unique_ptr<FeaturePolicy> policy1 = | 587 std::unique_ptr<FeaturePolicy> policy1 = |
| 585 CreateFromParentPolicy(nullptr, origin_a_); | 588 CreateFromParentPolicy(nullptr, origin_a_); |
| 586 policy1->SetHeaderPolicy({{{"default-self", false, {origin_a_, origin_b_}}}}); | 589 policy1->SetHeaderPolicy( |
| 590 {{{kDefaultSelfFeature false, {origin_a_, origin_b_}}}}); |
| 587 std::unique_ptr<FeaturePolicy> policy2 = | 591 std::unique_ptr<FeaturePolicy> policy2 = |
| 588 CreateFromParentPolicy(policy1.get(), origin_b_); | 592 CreateFromParentPolicy(policy1.get(), origin_b_); |
| 589 std::unique_ptr<FeaturePolicy> policy3 = | 593 std::unique_ptr<FeaturePolicy> policy3 = |
| 590 CreateFromParentPolicy(policy2.get(), origin_c_); | 594 CreateFromParentPolicy(policy2.get(), origin_c_); |
| 591 std::unique_ptr<FeaturePolicy> policy4 = | 595 std::unique_ptr<FeaturePolicy> policy4 = |
| 592 CreateFromParentPolicy(policy1.get(), origin_c_); | 596 CreateFromParentPolicy(policy1.get(), origin_c_); |
| 593 EXPECT_TRUE(policy1->IsFeatureEnabled(kDefaultSelfFeature)); | 597 EXPECT_TRUE(policy1->IsFeatureEnabled(kDefaultSelfFeature)); |
| 594 EXPECT_TRUE(policy2->IsFeatureEnabled(kDefaultSelfFeature)); | 598 EXPECT_TRUE(policy2->IsFeatureEnabled(kDefaultSelfFeature)); |
| 595 EXPECT_FALSE(policy3->IsFeatureEnabled(kDefaultSelfFeature)); | 599 EXPECT_FALSE(policy3->IsFeatureEnabled(kDefaultSelfFeature)); |
| 596 EXPECT_FALSE(policy4->IsFeatureEnabled(kDefaultSelfFeature)); | 600 EXPECT_FALSE(policy4->IsFeatureEnabled(kDefaultSelfFeature)); |
| (...skipping 11 matching lines...) Expand all Loading... |
| 608 // | | +-------------+ | | | 612 // | | +-------------+ | | |
| 609 // | | |(3)Origin C | | | | 613 // | | |(3)Origin C | | | |
| 610 // | | |No Policy | | | | 614 // | | |No Policy | | | |
| 611 // | | +-------------+ | | | 615 // | | +-------------+ | | |
| 612 // | +-------------------------------------------+ | | 616 // | +-------------------------------------------+ | |
| 613 // +-----------------------------------------------+ | 617 // +-----------------------------------------------+ |
| 614 // Default-self feature should be enabled in all frames; Default-on feature | 618 // Default-self feature should be enabled in all frames; Default-on feature |
| 615 // should be enabled in frame 1, and disabled in frames 2 and 3. | 619 // should be enabled in frame 1, and disabled in frames 2 and 3. |
| 616 std::unique_ptr<FeaturePolicy> policy1 = | 620 std::unique_ptr<FeaturePolicy> policy1 = |
| 617 CreateFromParentPolicy(nullptr, origin_a_); | 621 CreateFromParentPolicy(nullptr, origin_a_); |
| 618 policy1->SetHeaderPolicy({{{"default-self", false, {origin_a_, origin_b_}}, | 622 policy1->SetHeaderPolicy( |
| 619 {"default-on", false, {origin_a_}}}}); | 623 {{{kDefaultSelfFeature false, {origin_a_, origin_b_}}, |
| 624 {kDefaultOnFeature, false, {origin_a_}}}}); |
| 620 std::unique_ptr<FeaturePolicy> policy2 = | 625 std::unique_ptr<FeaturePolicy> policy2 = |
| 621 CreateFromParentPolicy(policy1.get(), origin_b_); | 626 CreateFromParentPolicy(policy1.get(), origin_b_); |
| 622 policy2->SetHeaderPolicy( | 627 policy2->SetHeaderPolicy( |
| 623 {{{"default-self", true, std::vector<url::Origin>()}, | 628 {{{kDefaultSelfFeature true, std::vector<url::Origin>()}, |
| 624 {"default-on", true, std::vector<url::Origin>()}}}); | 629 {kDefaultOnFeature, true, std::vector<url::Origin>()}}}); |
| 625 std::unique_ptr<FeaturePolicy> policy3 = | 630 std::unique_ptr<FeaturePolicy> policy3 = |
| 626 CreateFromParentPolicy(policy2.get(), origin_c_); | 631 CreateFromParentPolicy(policy2.get(), origin_c_); |
| 627 EXPECT_TRUE(policy1->IsFeatureEnabled(kDefaultSelfFeature)); | 632 EXPECT_TRUE(policy1->IsFeatureEnabled(kDefaultSelfFeature)); |
| 628 EXPECT_TRUE(policy1->IsFeatureEnabled(kDefaultOnFeature)); | 633 EXPECT_TRUE(policy1->IsFeatureEnabled(kDefaultOnFeature)); |
| 629 EXPECT_TRUE(policy2->IsFeatureEnabled(kDefaultSelfFeature)); | 634 EXPECT_TRUE(policy2->IsFeatureEnabled(kDefaultSelfFeature)); |
| 630 EXPECT_FALSE(policy2->IsFeatureEnabled(kDefaultOnFeature)); | 635 EXPECT_FALSE(policy2->IsFeatureEnabled(kDefaultOnFeature)); |
| 631 EXPECT_TRUE(policy3->IsFeatureEnabled(kDefaultSelfFeature)); | 636 EXPECT_TRUE(policy3->IsFeatureEnabled(kDefaultSelfFeature)); |
| 632 EXPECT_FALSE(policy3->IsFeatureEnabled(kDefaultOnFeature)); | 637 EXPECT_FALSE(policy3->IsFeatureEnabled(kDefaultOnFeature)); |
| 633 } | 638 } |
| 634 | 639 |
| 635 TEST_F(FeaturePolicyTest, TestFeatureEnabledForOrigin) { | 640 TEST_F(FeaturePolicyTest, TestFeatureEnabledForOrigin) { |
| 636 // +-----------------------------------------------+ | 641 // +-----------------------------------------------+ |
| 637 // |(1) Origin A | | 642 // |(1) Origin A | |
| 638 // |Policy: {"default-off": ["self", "Origin B"]} | | 643 // |Policy: {"default-off": ["self", "Origin B"]} | |
| 639 // +-----------------------------------------------+ | 644 // +-----------------------------------------------+ |
| 640 // Features should be enabled by the policy in frame 1 for origins A and B, | 645 // Features should be enabled by the policy in frame 1 for origins A and B, |
| 641 // and disabled for origin C. | 646 // and disabled for origin C. |
| 642 std::unique_ptr<FeaturePolicy> policy1 = | 647 std::unique_ptr<FeaturePolicy> policy1 = |
| 643 CreateFromParentPolicy(nullptr, origin_a_); | 648 CreateFromParentPolicy(nullptr, origin_a_); |
| 644 policy1->SetHeaderPolicy({{{"default-off", false, {origin_a_, origin_b_}}}}); | 649 policy1->SetHeaderPolicy( |
| 650 {{{kDefaultOffFeature, false, {origin_a_, origin_b_}}}}); |
| 645 EXPECT_TRUE( | 651 EXPECT_TRUE( |
| 646 policy1->IsFeatureEnabledForOrigin(kDefaultOffFeature, origin_a_)); | 652 policy1->IsFeatureEnabledForOrigin(kDefaultOffFeature, origin_a_)); |
| 647 EXPECT_TRUE( | 653 EXPECT_TRUE( |
| 648 policy1->IsFeatureEnabledForOrigin(kDefaultOffFeature, origin_b_)); | 654 policy1->IsFeatureEnabledForOrigin(kDefaultOffFeature, origin_b_)); |
| 649 EXPECT_FALSE( | 655 EXPECT_FALSE( |
| 650 policy1->IsFeatureEnabledForOrigin(kDefaultOffFeature, origin_c_)); | 656 policy1->IsFeatureEnabledForOrigin(kDefaultOffFeature, origin_c_)); |
| 651 } | 657 } |
| 652 | 658 |
| 653 // Test frame policies | 659 // Test frame policies |
| 654 | 660 |
| 655 TEST_F(FeaturePolicyTest, TestSimpleFramePolicy) { | 661 TEST_F(FeaturePolicyTest, TestSimpleFramePolicy) { |
| 656 // +-------------------------------------------------+ | 662 // +-------------------------------------------------+ |
| 657 // |(1)Origin A | | 663 // |(1)Origin A | |
| 658 // |No Policy | | 664 // |No Policy | |
| 659 // | | | 665 // | | |
| 660 // |<iframe policy='{"default-self": ["Origin B"]}'> | | 666 // |<iframe policy='{"default-self": ["Origin B"]}'> | |
| 661 // | +-------------+ | | 667 // | +-------------+ | |
| 662 // | |(2)Origin B | | | 668 // | |(2)Origin B | | |
| 663 // | |No Policy | | | 669 // | |No Policy | | |
| 664 // | +-------------+ | | 670 // | +-------------+ | |
| 665 // +-------------------------------------------------+ | 671 // +-------------------------------------------------+ |
| 666 // Default-self feature should be enabled in cross-origin child frame because | 672 // Default-self feature should be enabled in cross-origin child frame because |
| 667 // permission was delegated through frame policy. | 673 // permission was delegated through frame policy. |
| 668 // This is the same scenario as when the iframe is declared as | 674 // This is the same scenario as when the iframe is declared as |
| 669 // <iframe allow="default-self"> | 675 // <iframe allow="default-self"> |
| 670 std::unique_ptr<FeaturePolicy> policy1 = | 676 std::unique_ptr<FeaturePolicy> policy1 = |
| 671 CreateFromParentPolicy(nullptr, origin_a_); | 677 CreateFromParentPolicy(nullptr, origin_a_); |
| 672 ParsedFeaturePolicyHeader frame_policy = { | 678 ParsedFeaturePolicyHeader frame_policy = { |
| 673 {{"default-self", false, {origin_b_}}}}; | 679 {{kDefaultSelfFeature false, {origin_b_}}}}; |
| 674 std::unique_ptr<FeaturePolicy> policy2 = | 680 std::unique_ptr<FeaturePolicy> policy2 = |
| 675 CreateFromParentWithFramePolicy(policy1.get(), frame_policy, origin_b_); | 681 CreateFromParentWithFramePolicy(policy1.get(), frame_policy, origin_b_); |
| 676 EXPECT_TRUE( | 682 EXPECT_TRUE( |
| 677 policy1->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_a_)); | 683 policy1->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_a_)); |
| 678 EXPECT_FALSE( | 684 EXPECT_FALSE( |
| 679 policy1->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_c_)); | 685 policy1->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_c_)); |
| 680 EXPECT_FALSE( | 686 EXPECT_FALSE( |
| 681 policy1->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_c_)); | 687 policy1->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_c_)); |
| 682 EXPECT_FALSE( | 688 EXPECT_FALSE( |
| 683 policy2->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_a_)); | 689 policy2->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_a_)); |
| (...skipping 14 matching lines...) Expand all Loading... |
| 698 // | |No Policy | | | 704 // | |No Policy | | |
| 699 // | +-------------+ | | 705 // | +-------------+ | |
| 700 // +------------------------------------------+ | 706 // +------------------------------------------+ |
| 701 // Default-self feature should be enabled in cross-origin child frame because | 707 // Default-self feature should be enabled in cross-origin child frame because |
| 702 // permission was delegated through frame policy. | 708 // permission was delegated through frame policy. |
| 703 // This is the same scenario that arises when the iframe is declared as | 709 // This is the same scenario that arises when the iframe is declared as |
| 704 // <iframe allowfullscreen> | 710 // <iframe allowfullscreen> |
| 705 std::unique_ptr<FeaturePolicy> policy1 = | 711 std::unique_ptr<FeaturePolicy> policy1 = |
| 706 CreateFromParentPolicy(nullptr, origin_a_); | 712 CreateFromParentPolicy(nullptr, origin_a_); |
| 707 ParsedFeaturePolicyHeader frame_policy = { | 713 ParsedFeaturePolicyHeader frame_policy = { |
| 708 {{"default-self", true, std::vector<url::Origin>()}}}; | 714 {{kDefaultSelfFeature true, std::vector<url::Origin>()}}}; |
| 709 std::unique_ptr<FeaturePolicy> policy2 = | 715 std::unique_ptr<FeaturePolicy> policy2 = |
| 710 CreateFromParentWithFramePolicy(policy1.get(), frame_policy, origin_b_); | 716 CreateFromParentWithFramePolicy(policy1.get(), frame_policy, origin_b_); |
| 711 EXPECT_TRUE( | 717 EXPECT_TRUE( |
| 712 policy1->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_a_)); | 718 policy1->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_a_)); |
| 713 EXPECT_FALSE( | 719 EXPECT_FALSE( |
| 714 policy1->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_b_)); | 720 policy1->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_b_)); |
| 715 EXPECT_FALSE( | 721 EXPECT_FALSE( |
| 716 policy1->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_c_)); | 722 policy1->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_c_)); |
| 717 EXPECT_FALSE( | 723 EXPECT_FALSE( |
| 718 policy2->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_a_)); | 724 policy2->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_a_)); |
| (...skipping 25 matching lines...) Expand all Loading... |
| 744 // | | |No Policy | | | | 750 // | | |No Policy | | | |
| 745 // | | +-------------+ | | | 751 // | | +-------------+ | | |
| 746 // | +-------------------------------------------------+ | | 752 // | +-------------------------------------------------+ | |
| 747 // +-----------------------------------------------------+ | 753 // +-----------------------------------------------------+ |
| 748 // Default-self feature should be enabled in cross-origin child frames 2 and | 754 // Default-self feature should be enabled in cross-origin child frames 2 and |
| 749 // 3. Feature should be disabled in frame 4 because it was not further | 755 // 3. Feature should be disabled in frame 4 because it was not further |
| 750 // delegated through frame policy. | 756 // delegated through frame policy. |
| 751 std::unique_ptr<FeaturePolicy> policy1 = | 757 std::unique_ptr<FeaturePolicy> policy1 = |
| 752 CreateFromParentPolicy(nullptr, origin_a_); | 758 CreateFromParentPolicy(nullptr, origin_a_); |
| 753 ParsedFeaturePolicyHeader frame_policy1 = { | 759 ParsedFeaturePolicyHeader frame_policy1 = { |
| 754 {{"default-self", false, {origin_b_}}}}; | 760 {{kDefaultSelfFeature false, {origin_b_}}}}; |
| 755 std::unique_ptr<FeaturePolicy> policy2 = | 761 std::unique_ptr<FeaturePolicy> policy2 = |
| 756 CreateFromParentWithFramePolicy(policy1.get(), frame_policy1, origin_b_); | 762 CreateFromParentWithFramePolicy(policy1.get(), frame_policy1, origin_b_); |
| 757 ParsedFeaturePolicyHeader frame_policy2 = { | 763 ParsedFeaturePolicyHeader frame_policy2 = { |
| 758 {{"default-self", false, {origin_c_}}}}; | 764 {{kDefaultSelfFeature false, {origin_c_}}}}; |
| 759 std::unique_ptr<FeaturePolicy> policy3 = | 765 std::unique_ptr<FeaturePolicy> policy3 = |
| 760 CreateFromParentWithFramePolicy(policy2.get(), frame_policy2, origin_c_); | 766 CreateFromParentWithFramePolicy(policy2.get(), frame_policy2, origin_c_); |
| 761 std::unique_ptr<FeaturePolicy> policy4 = | 767 std::unique_ptr<FeaturePolicy> policy4 = |
| 762 CreateFromParentPolicy(policy2.get(), origin_c_); | 768 CreateFromParentPolicy(policy2.get(), origin_c_); |
| 763 EXPECT_FALSE( | 769 EXPECT_FALSE( |
| 764 policy3->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_a_)); | 770 policy3->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_a_)); |
| 765 EXPECT_FALSE( | 771 EXPECT_FALSE( |
| 766 policy3->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_b_)); | 772 policy3->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_b_)); |
| 767 EXPECT_TRUE( | 773 EXPECT_TRUE( |
| 768 policy3->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_c_)); | 774 policy3->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_c_)); |
| (...skipping 20 matching lines...) Expand all Loading... |
| 789 // | +-------------+ | | 795 // | +-------------+ | |
| 790 // | |(3)Origin B | | | 796 // | |(3)Origin B | | |
| 791 // | |No Policy | | | 797 // | |No Policy | | |
| 792 // | +-------------+ | | 798 // | +-------------+ | |
| 793 // +-------------------------------------+ | 799 // +-------------------------------------+ |
| 794 // Default-on feature should be disabled in both same-origin and cross-origin | 800 // Default-on feature should be disabled in both same-origin and cross-origin |
| 795 // child frames because permission was removed through frame policy. | 801 // child frames because permission was removed through frame policy. |
| 796 std::unique_ptr<FeaturePolicy> policy1 = | 802 std::unique_ptr<FeaturePolicy> policy1 = |
| 797 CreateFromParentPolicy(nullptr, origin_a_); | 803 CreateFromParentPolicy(nullptr, origin_a_); |
| 798 ParsedFeaturePolicyHeader frame_policy1 = { | 804 ParsedFeaturePolicyHeader frame_policy1 = { |
| 799 {{"default-on", false, std::vector<url::Origin>()}}}; | 805 {{kDefaultOnFeature, false, std::vector<url::Origin>()}}}; |
| 800 std::unique_ptr<FeaturePolicy> policy2 = | 806 std::unique_ptr<FeaturePolicy> policy2 = |
| 801 CreateFromParentWithFramePolicy(policy1.get(), frame_policy1, origin_a_); | 807 CreateFromParentWithFramePolicy(policy1.get(), frame_policy1, origin_a_); |
| 802 ParsedFeaturePolicyHeader frame_policy2 = { | 808 ParsedFeaturePolicyHeader frame_policy2 = { |
| 803 {{"default-on", false, std::vector<url::Origin>()}}}; | 809 {{kDefaultOnFeature, false, std::vector<url::Origin>()}}}; |
| 804 std::unique_ptr<FeaturePolicy> policy3 = | 810 std::unique_ptr<FeaturePolicy> policy3 = |
| 805 CreateFromParentWithFramePolicy(policy1.get(), frame_policy2, origin_b_); | 811 CreateFromParentWithFramePolicy(policy1.get(), frame_policy2, origin_b_); |
| 806 EXPECT_TRUE(policy1->IsFeatureEnabledForOrigin(kDefaultOnFeature, origin_a_)); | 812 EXPECT_TRUE(policy1->IsFeatureEnabledForOrigin(kDefaultOnFeature, origin_a_)); |
| 807 EXPECT_TRUE(policy1->IsFeatureEnabledForOrigin(kDefaultOnFeature, origin_b_)); | 813 EXPECT_TRUE(policy1->IsFeatureEnabledForOrigin(kDefaultOnFeature, origin_b_)); |
| 808 EXPECT_TRUE(policy1->IsFeatureEnabledForOrigin(kDefaultOnFeature, origin_c_)); | 814 EXPECT_TRUE(policy1->IsFeatureEnabledForOrigin(kDefaultOnFeature, origin_c_)); |
| 809 EXPECT_FALSE( | 815 EXPECT_FALSE( |
| 810 policy2->IsFeatureEnabledForOrigin(kDefaultOnFeature, origin_a_)); | 816 policy2->IsFeatureEnabledForOrigin(kDefaultOnFeature, origin_a_)); |
| 811 EXPECT_FALSE( | 817 EXPECT_FALSE( |
| 812 policy2->IsFeatureEnabledForOrigin(kDefaultOnFeature, origin_b_)); | 818 policy2->IsFeatureEnabledForOrigin(kDefaultOnFeature, origin_b_)); |
| 813 EXPECT_FALSE( | 819 EXPECT_FALSE( |
| (...skipping 20 matching lines...) Expand all Loading... |
| 834 // |<iframe policy='{"default-off": ["Origin B"]}'> | | 840 // |<iframe policy='{"default-off": ["Origin B"]}'> | |
| 835 // | +-------------+ | | 841 // | +-------------+ | |
| 836 // | |(3)Origin B | | | 842 // | |(3)Origin B | | |
| 837 // | |No Policy | | | 843 // | |No Policy | | |
| 838 // | +-------------+ | | 844 // | +-------------+ | |
| 839 // +------------------------------------------------+ | 845 // +------------------------------------------------+ |
| 840 // Default-off feature should be disabled in both same-origin and cross-origin | 846 // Default-off feature should be disabled in both same-origin and cross-origin |
| 841 // child frames because they did not declare their own policy to enable it. | 847 // child frames because they did not declare their own policy to enable it. |
| 842 std::unique_ptr<FeaturePolicy> policy1 = | 848 std::unique_ptr<FeaturePolicy> policy1 = |
| 843 CreateFromParentPolicy(nullptr, origin_a_); | 849 CreateFromParentPolicy(nullptr, origin_a_); |
| 844 policy1->SetHeaderPolicy({{{"default-off", false, {origin_a_}}}}); | 850 policy1->SetHeaderPolicy({{{kDefaultOffFeature, false, {origin_a_}}}}); |
| 845 ParsedFeaturePolicyHeader frame_policy1 = { | 851 ParsedFeaturePolicyHeader frame_policy1 = { |
| 846 {{"default-off", false, {origin_a_}}}}; | 852 {{kDefaultOffFeature, false, {origin_a_}}}}; |
| 847 std::unique_ptr<FeaturePolicy> policy2 = | 853 std::unique_ptr<FeaturePolicy> policy2 = |
| 848 CreateFromParentWithFramePolicy(policy1.get(), frame_policy1, origin_a_); | 854 CreateFromParentWithFramePolicy(policy1.get(), frame_policy1, origin_a_); |
| 849 ParsedFeaturePolicyHeader frame_policy2 = { | 855 ParsedFeaturePolicyHeader frame_policy2 = { |
| 850 {{"default-off", false, {origin_b_}}}}; | 856 {{kDefaultOffFeature, false, {origin_b_}}}}; |
| 851 std::unique_ptr<FeaturePolicy> policy3 = | 857 std::unique_ptr<FeaturePolicy> policy3 = |
| 852 CreateFromParentWithFramePolicy(policy1.get(), frame_policy2, origin_b_); | 858 CreateFromParentWithFramePolicy(policy1.get(), frame_policy2, origin_b_); |
| 853 EXPECT_TRUE( | 859 EXPECT_TRUE( |
| 854 policy1->IsFeatureEnabledForOrigin(kDefaultOffFeature, origin_a_)); | 860 policy1->IsFeatureEnabledForOrigin(kDefaultOffFeature, origin_a_)); |
| 855 EXPECT_FALSE( | 861 EXPECT_FALSE( |
| 856 policy1->IsFeatureEnabledForOrigin(kDefaultOffFeature, origin_b_)); | 862 policy1->IsFeatureEnabledForOrigin(kDefaultOffFeature, origin_b_)); |
| 857 EXPECT_FALSE( | 863 EXPECT_FALSE( |
| 858 policy1->IsFeatureEnabledForOrigin(kDefaultOffFeature, origin_c_)); | 864 policy1->IsFeatureEnabledForOrigin(kDefaultOffFeature, origin_c_)); |
| 859 EXPECT_FALSE( | 865 EXPECT_FALSE( |
| 860 policy2->IsFeatureEnabledForOrigin(kDefaultOffFeature, origin_a_)); | 866 policy2->IsFeatureEnabledForOrigin(kDefaultOffFeature, origin_a_)); |
| (...skipping 24 matching lines...) Expand all Loading... |
| 885 // | +--------------------------------------------+ | | 891 // | +--------------------------------------------+ | |
| 886 // | |(3)Origin B | | | 892 // | |(3)Origin B | | |
| 887 // | |Policy: {"default-off": ["self"]} | | | 893 // | |Policy: {"default-off": ["self"]} | | |
| 888 // | +--------------------------------------------+ | | 894 // | +--------------------------------------------+ | |
| 889 // +------------------------------------------------+ | 895 // +------------------------------------------------+ |
| 890 // Default-off feature should be enabled in both same-origin and cross-origin | 896 // Default-off feature should be enabled in both same-origin and cross-origin |
| 891 // child frames because it is delegated through the parent's frame policy, and | 897 // child frames because it is delegated through the parent's frame policy, and |
| 892 // they declare their own policy to enable it. | 898 // they declare their own policy to enable it. |
| 893 std::unique_ptr<FeaturePolicy> policy1 = | 899 std::unique_ptr<FeaturePolicy> policy1 = |
| 894 CreateFromParentPolicy(nullptr, origin_a_); | 900 CreateFromParentPolicy(nullptr, origin_a_); |
| 895 policy1->SetHeaderPolicy({{{"default-off", false, {origin_a_}}}}); | 901 policy1->SetHeaderPolicy({{{kDefaultOffFeature, false, {origin_a_}}}}); |
| 896 ParsedFeaturePolicyHeader frame_policy1 = { | 902 ParsedFeaturePolicyHeader frame_policy1 = { |
| 897 {{"default-off", false, {origin_a_}}}}; | 903 {{kDefaultOffFeature, false, {origin_a_}}}}; |
| 898 std::unique_ptr<FeaturePolicy> policy2 = | 904 std::unique_ptr<FeaturePolicy> policy2 = |
| 899 CreateFromParentWithFramePolicy(policy1.get(), frame_policy1, origin_a_); | 905 CreateFromParentWithFramePolicy(policy1.get(), frame_policy1, origin_a_); |
| 900 policy2->SetHeaderPolicy({{{"default-off", false, {origin_a_}}}}); | 906 policy2->SetHeaderPolicy({{{kDefaultOffFeature, false, {origin_a_}}}}); |
| 901 ParsedFeaturePolicyHeader frame_policy2 = { | 907 ParsedFeaturePolicyHeader frame_policy2 = { |
| 902 {{"default-off", false, {origin_b_}}}}; | 908 {{kDefaultOffFeature, false, {origin_b_}}}}; |
| 903 std::unique_ptr<FeaturePolicy> policy3 = | 909 std::unique_ptr<FeaturePolicy> policy3 = |
| 904 CreateFromParentWithFramePolicy(policy1.get(), frame_policy2, origin_b_); | 910 CreateFromParentWithFramePolicy(policy1.get(), frame_policy2, origin_b_); |
| 905 policy3->SetHeaderPolicy({{{"default-off", false, {origin_b_}}}}); | 911 policy3->SetHeaderPolicy({{{kDefaultOffFeature, false, {origin_b_}}}}); |
| 906 EXPECT_TRUE( | 912 EXPECT_TRUE( |
| 907 policy1->IsFeatureEnabledForOrigin(kDefaultOffFeature, origin_a_)); | 913 policy1->IsFeatureEnabledForOrigin(kDefaultOffFeature, origin_a_)); |
| 908 EXPECT_FALSE( | 914 EXPECT_FALSE( |
| 909 policy1->IsFeatureEnabledForOrigin(kDefaultOffFeature, origin_b_)); | 915 policy1->IsFeatureEnabledForOrigin(kDefaultOffFeature, origin_b_)); |
| 910 EXPECT_FALSE( | 916 EXPECT_FALSE( |
| 911 policy1->IsFeatureEnabledForOrigin(kDefaultOffFeature, origin_c_)); | 917 policy1->IsFeatureEnabledForOrigin(kDefaultOffFeature, origin_c_)); |
| 912 EXPECT_TRUE( | 918 EXPECT_TRUE( |
| 913 policy2->IsFeatureEnabledForOrigin(kDefaultOffFeature, origin_a_)); | 919 policy2->IsFeatureEnabledForOrigin(kDefaultOffFeature, origin_a_)); |
| 914 EXPECT_FALSE( | 920 EXPECT_FALSE( |
| 915 policy2->IsFeatureEnabledForOrigin(kDefaultOffFeature, origin_b_)); | 921 policy2->IsFeatureEnabledForOrigin(kDefaultOffFeature, origin_b_)); |
| (...skipping 23 matching lines...) Expand all Loading... |
| 939 // | |(3)Origin B | | | 945 // | |(3)Origin B | | |
| 940 // | |Policy: {"default-self": ["self"]} | | | 946 // | |Policy: {"default-self": ["self"]} | | |
| 941 // | +-------------------------------------------+ | | 947 // | +-------------------------------------------+ | |
| 942 // +-----------------------------------------------+ | 948 // +-----------------------------------------------+ |
| 943 // Default-self feature should be disabled in both cross-origin child frames | 949 // Default-self feature should be disabled in both cross-origin child frames |
| 944 // by frame policy, even though the parent frame's header policy would | 950 // by frame policy, even though the parent frame's header policy would |
| 945 // otherwise enable it. This is true regardless of the child frame's header | 951 // otherwise enable it. This is true regardless of the child frame's header |
| 946 // policy. | 952 // policy. |
| 947 std::unique_ptr<FeaturePolicy> policy1 = | 953 std::unique_ptr<FeaturePolicy> policy1 = |
| 948 CreateFromParentPolicy(nullptr, origin_a_); | 954 CreateFromParentPolicy(nullptr, origin_a_); |
| 949 policy1->SetHeaderPolicy({{{"default-self", false, {origin_a_, origin_b_}}}}); | 955 policy1->SetHeaderPolicy( |
| 956 {{{kDefaultSelfFeature false, {origin_a_, origin_b_}}}}); |
| 950 ParsedFeaturePolicyHeader frame_policy1 = { | 957 ParsedFeaturePolicyHeader frame_policy1 = { |
| 951 {{"default-self", false, std::vector<url::Origin>()}}}; | 958 {{kDefaultSelfFeature false, std::vector<url::Origin>()}}}; |
| 952 std::unique_ptr<FeaturePolicy> policy2 = | 959 std::unique_ptr<FeaturePolicy> policy2 = |
| 953 CreateFromParentWithFramePolicy(policy1.get(), frame_policy1, origin_b_); | 960 CreateFromParentWithFramePolicy(policy1.get(), frame_policy1, origin_b_); |
| 954 ParsedFeaturePolicyHeader frame_policy2 = { | 961 ParsedFeaturePolicyHeader frame_policy2 = { |
| 955 {{"default-self", false, std::vector<url::Origin>()}}}; | 962 {{kDefaultSelfFeature false, std::vector<url::Origin>()}}}; |
| 956 std::unique_ptr<FeaturePolicy> policy3 = | 963 std::unique_ptr<FeaturePolicy> policy3 = |
| 957 CreateFromParentWithFramePolicy(policy1.get(), frame_policy2, origin_b_); | 964 CreateFromParentWithFramePolicy(policy1.get(), frame_policy2, origin_b_); |
| 958 policy3->SetHeaderPolicy({{{"default-self", false, {origin_b_}}}}); | 965 policy3->SetHeaderPolicy({{{kDefaultSelfFeature false, {origin_b_}}}}); |
| 959 EXPECT_FALSE( | 966 EXPECT_FALSE( |
| 960 policy2->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_b_)); | 967 policy2->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_b_)); |
| 961 EXPECT_FALSE( | 968 EXPECT_FALSE( |
| 962 policy3->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_b_)); | 969 policy3->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_b_)); |
| 963 } | 970 } |
| 964 | 971 |
| 965 TEST_F(FeaturePolicyTest, TestCombineFrameAndHeaderPolicies) { | 972 TEST_F(FeaturePolicyTest, TestCombineFrameAndHeaderPolicies) { |
| 966 // +-------------------------------------------------+ | 973 // +-------------------------------------------------+ |
| 967 // |(1)Origin A | | 974 // |(1)Origin A | |
| 968 // |No Policy | | 975 // |No Policy | |
| (...skipping 14 matching lines...) Expand all Loading... |
| 983 // | | |(4)Origin C | | | | 990 // | | |(4)Origin C | | | |
| 984 // | | |No Policy | | | | 991 // | | |No Policy | | | |
| 985 // | | +-------------+ | | | 992 // | | +-------------+ | | |
| 986 // | +---------------------------------------------+ | | 993 // | +---------------------------------------------+ | |
| 987 // +-------------------------------------------------+ | 994 // +-------------------------------------------------+ |
| 988 // Default-self feature should be enabled in cross-origin child frames 2 and | 995 // Default-self feature should be enabled in cross-origin child frames 2 and |
| 989 // 4. Feature should be disabled in frame 3 by frame policy. | 996 // 4. Feature should be disabled in frame 3 by frame policy. |
| 990 std::unique_ptr<FeaturePolicy> policy1 = | 997 std::unique_ptr<FeaturePolicy> policy1 = |
| 991 CreateFromParentPolicy(nullptr, origin_a_); | 998 CreateFromParentPolicy(nullptr, origin_a_); |
| 992 ParsedFeaturePolicyHeader frame_policy1 = { | 999 ParsedFeaturePolicyHeader frame_policy1 = { |
| 993 {{"default-self", false, {origin_b_}}}}; | 1000 {{kDefaultSelfFeature false, {origin_b_}}}}; |
| 994 std::unique_ptr<FeaturePolicy> policy2 = | 1001 std::unique_ptr<FeaturePolicy> policy2 = |
| 995 CreateFromParentWithFramePolicy(policy1.get(), frame_policy1, origin_b_); | 1002 CreateFromParentWithFramePolicy(policy1.get(), frame_policy1, origin_b_); |
| 996 policy2->SetHeaderPolicy( | 1003 policy2->SetHeaderPolicy( |
| 997 {{{"default-self", true, std::vector<url::Origin>()}}}); | 1004 {{{kDefaultSelfFeature true, std::vector<url::Origin>()}}}); |
| 998 ParsedFeaturePolicyHeader frame_policy2 = { | 1005 ParsedFeaturePolicyHeader frame_policy2 = { |
| 999 {{"default-self", false, std::vector<url::Origin>()}}}; | 1006 {{kDefaultSelfFeature false, std::vector<url::Origin>()}}}; |
| 1000 std::unique_ptr<FeaturePolicy> policy3 = | 1007 std::unique_ptr<FeaturePolicy> policy3 = |
| 1001 CreateFromParentWithFramePolicy(policy2.get(), frame_policy2, origin_c_); | 1008 CreateFromParentWithFramePolicy(policy2.get(), frame_policy2, origin_c_); |
| 1002 std::unique_ptr<FeaturePolicy> policy4 = | 1009 std::unique_ptr<FeaturePolicy> policy4 = |
| 1003 CreateFromParentPolicy(policy2.get(), origin_c_); | 1010 CreateFromParentPolicy(policy2.get(), origin_c_); |
| 1004 EXPECT_TRUE( | 1011 EXPECT_TRUE( |
| 1005 policy1->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_a_)); | 1012 policy1->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_a_)); |
| 1006 EXPECT_TRUE( | 1013 EXPECT_TRUE( |
| 1007 policy2->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_b_)); | 1014 policy2->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_b_)); |
| 1008 EXPECT_FALSE( | 1015 EXPECT_FALSE( |
| 1009 policy3->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_c_)); | 1016 policy3->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_c_)); |
| 1010 EXPECT_TRUE( | 1017 EXPECT_TRUE( |
| 1011 policy4->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_c_)); | 1018 policy4->IsFeatureEnabledForOrigin(kDefaultSelfFeature, origin_c_)); |
| 1012 } | 1019 } |
| 1013 } // namespace content | 1020 } // namespace content |
| OLD | NEW |