CSP: New test with form-action and a redirect into a new window.

CSP: New test with form-action and a redirect into a new window.

This test shows that the CSP of the navigating frame are used instead of
the CSP of the frame that has initiated the navigation.

This is a reland of: https://crrev.com/2747823002/

BUG=700964
CQ_INCLUDE_TRYBOTS=master.tryserver.chromium.linux:linux_site_isolation,linux_chromium_browser_side_navigation_rel

Review-Url: https://codereview.chromium.org/2749233002
Cr-Commit-Position: refs/heads/master@{#457385}
Committed: https://chromium.googlesource.com/chromium/src/+/ff9efad9c23a0623f055677bec071f4007b290e1

[arthursonzogni, 2017-03-15 09:50:51]

The CQ bit was checked by arthursonzogni@chromium.org to run a CQ dry run

[commit-bot: I haz the power, 2017-03-15 09:51:07]

Dry run: CQ is trying da patch. Follow status at
 
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[commit-bot: I haz the power, 2017-03-15 11:07:53]

The CQ bit was unchecked by commit-bot@chromium.org

[commit-bot: I haz the power, 2017-03-15 11:07:54]

Dry run: This issue passed the CQ dry run.

[arthursonzogni, 2017-03-15 11:56:56]

The CQ bit was checked by arthursonzogni@chromium.org to run a CQ dry run

[commit-bot: I haz the power, 2017-03-15 11:57:11]

Dry run: CQ is trying da patch. Follow status at
 
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[arthursonzogni, 2017-03-15 12:16:40]

arthursonzogni@chromium.org changed reviewers:
+ mkwst@chromium.org

[arthursonzogni, 2017-03-15 12:16:40]

Hi Mike,

This is a reland of
https://codereview.chromium.org/2747823002/
Please take a look.

What I have done is replacing:
window.open('localhost:8000/security/resources/empty.html'...
by
window.open('/security/resources/empty.html'...

Now the test fails, even with site-isolation.

It appears to me that when site isolation is enabled and the form submission
targets a window that is cross-origin, the navigation happens in the process of
the first window(the one that has initiated the navigation). I think it uses the
CSP of about:blank which inherits of the ones of the first document. Then it is
transferred into the new process and displayed in the new window.
On the other hand, when it targets a same-site window, I think the navigation
happens in the frame of the new window. In this case, it uses the CSP of the
document that was displayed before(/security/resources/empty.html).

[commit-bot: I haz the power, 2017-03-15 12:57:40]

The CQ bit was unchecked by commit-bot@chromium.org

[commit-bot: I haz the power, 2017-03-15 12:57:41]

Dry run: This issue passed the CQ dry run.

[Mike West, 2017-03-16 06:09:58]

LGTM.

[arthursonzogni, 2017-03-16 09:35:01]

The CQ bit was checked by arthursonzogni@chromium.org

[commit-bot: I haz the power, 2017-03-16 09:35:22]

CQ is trying da patch. Follow status at
 
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[commit-bot: I haz the power, 2017-03-16 09:40:29]

CQ is committing da patch.

Bot data: {"patchset_id": 20001, "attempt_start_ts": 1489656901055390,
"parent_rev": "ea77fe5f9663714b8458b23dd996279baade45d6", "commit_rev":
"ff9efad9c23a0623f055677bec071f4007b290e1"}

[commit-bot: I haz the power, 2017-03-16 09:41:10]

Description was changed from

==========
CSP: New test with form-action and a redirect into a new window.

This test shows that the CSP of the navigating frame are used instead of
the CSP of the frame that has initiated the navigation.

This is a reland of: https://crrev.com/2747823002/

BUG=700964
CQ_INCLUDE_TRYBOTS=master.tryserver.chromium.linux:linux_site_isolation,linux_chromium_browser_side_navigation_rel
==========

to

==========
CSP: New test with form-action and a redirect into a new window.

This test shows that the CSP of the navigating frame are used instead of
the CSP of the frame that has initiated the navigation.

This is a reland of: https://crrev.com/2747823002/

BUG=700964
CQ_INCLUDE_TRYBOTS=master.tryserver.chromium.linux:linux_site_isolation,linux_chromium_browser_side_navigation_rel

Review-Url: https://codereview.chromium.org/2749233002
Cr-Commit-Position: refs/heads/master@{#457385}
Committed:
https://chromium.googlesource.com/chromium/src/+/ff9efad9c23a0623f055677bec07...
==========

[commit-bot: I haz the power, 2017-03-16 09:41:11]

Committed patchset #2 (id:20001) as
https://chromium.googlesource.com/chromium/src/+/ff9efad9c23a0623f055677bec07...