Test that no crash happens with the CWS error page.

chrome/browser/extensions/process_management_browsertest.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <stddef.h>
 
 #include "base/strings/utf_string_conversions.h"
 #include "build/build_config.h"
 #include "chrome/browser/chrome_notification_types.h"
 #include "chrome/browser/extensions/extension_apitest.h"
@@ skipping 11 matching lines @@
 #include "content/public/browser/render_frame_host.h"
 #include "content/public/browser/render_process_host.h"
 #include "content/public/browser/render_view_host.h"
 #include "content/public/browser/site_instance.h"
 #include "content/public/browser/web_contents.h"
 #include "content/public/test/browser_test_utils.h"
 #include "content/public/test/test_navigation_observer.h"
 #include "extensions/browser/extension_host.h"
 #include "extensions/browser/process_manager.h"
 #include "extensions/browser/process_map.h"
+#include "extensions/common/extension_urls.h"
 #include "extensions/common/switches.h"
 #include "net/dns/mock_host_resolver.h"
 #include "net/test/embedded_test_server/embedded_test_server.h"
 
 using content::NavigationController;
 using content::WebContents;
 
 namespace {
 
 class ProcessManagementTest : public ExtensionBrowserTest {
@@ skipping 409 matching lines @@
   // the process is the same for all SiteInstances. This allows us to verify
   // that the site-to-process map for the extension hasn't been overwritten by
   // the process of the |blocked_url|.
   scoped_refptr<content::SiteInstance> new_site_instance =
       content::SiteInstance::CreateForURL(web_contents->GetBrowserContext(),
                                           extension->GetResourceURL(""));
   EXPECT_TRUE(new_site_instance->HasProcess());
   EXPECT_EQ(new_site_instance->GetProcess(),
             web_contents->GetSiteInstance()->GetProcess());
 }
+
+// This problem is similar to https://crbug.com/622385. It happens when an
+// iframe error page with the Chrome Web Store URL is displayed and the iframe
+// and its parent reside in the same process. In this case, the renderer
+// process is killed with the RFH_CAN_COMMIT_URL_BLOCKED error code. This test
+// asserts that the renderer is still alive after the navigation.
+IN_PROC_BROWSER_TEST_F(ChromeWebStoreProcessTest,
+                       ChromeWebStoreBlockedByFrameSrc) {
+  GURL url =
+      embedded_test_server()->GetURL("/extensions/iframe-child-src-none.html");
+  ui_test_utils::NavigateToURL(browser(), url);
+
+  WebContents* web_contents =
+      browser()->tab_strip_model()->GetActiveWebContents();
+
+  // Make the iframe navigate to the Chrome Web Store and wait for the 'load'
+  // event. This is also a check that the renderer is still alive after the
+  // navigation.
+  std::string message;
+  EXPECT_TRUE(ExecuteScriptAndExtractString(
+      web_contents,
+      "var iframe = document.getElementById('test');"
+      "iframe.onload = function() {"
+      "    domAutomationController.send('iframe loaded');"
+      "};"
+      "iframe.src = '" +
+          std::string(extension_urls::kChromeWebstoreBaseURL) + "';",
+      &message));
+  EXPECT_EQ("iframe loaded", message);
+}