Use Referrer-Policy headers for CSS stylesheets

third_party/WebKit/Source/core/html/parser/CSSPreloadScannerTest.cpp

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "core/html/parser/CSSPreloadScanner.h"
 
 #include <memory>
 #include "core/frame/Settings.h"
 #include "core/html/parser/HTMLResourcePreloader.h"
 #include "core/testing/DummyPageHolder.h"
+#include "platform/exported/WrappedResourceResponse.h"
 #include "platform/heap/Heap.h"
 #include "platform/loader/fetch/FetchContext.h"
 #include "platform/loader/fetch/Resource.h"
 #include "platform/loader/fetch/ResourceError.h"
 #include "platform/loader/fetch/ResourceFetcher.h"
 #include "platform/loader/fetch/ResourceRequest.h"
 #include "platform/weborigin/KURL.h"
+#include "public/platform/Platform.h"
+#include "public/platform/WebURLLoaderMockFactory.h"
 #include "testing/gtest/include/gtest/gtest.h"
 
 namespace blink {
 
 namespace {
 
 class MockHTMLResourcePreloader : public HTMLResourcePreloader {
   WTF_MAKE_NONCOPYABLE(MockHTMLResourcePreloader);
 
  public:
-  MockHTMLResourcePreloader(Document& document)
-      : HTMLResourcePreloader(document) {}
+  explicit MockHTMLResourcePreloader(Document& document,
+                                     const char* expectedReferrer = nullptr)
+      : HTMLResourcePreloader(document), m_expectedReferrer(expectedReferrer) {}
 
   void preload(std::unique_ptr<PreloadRequest> preloadRequest,
-               const NetworkHintsInterface&) override {}
+               const NetworkHintsInterface&) override {
+    if (m_expectedReferrer) {
+      Resource* resource = preloadRequest->start(document());
+      if (resource) {
+        EXPECT_EQ(m_expectedReferrer,
+                  resource->resourceRequest().httpReferrer());
+      }
+    }
+  }
+
+  bool m_storeReferrer;

[estark, 2017/03/28 18:17:21]

unused

[jochen (gone - plz use gerrit), 2017/03/29 08:13:11]

deleted

+  const char* m_expectedReferrer;
 };
 
 class PreloadRecordingCSSPreloaderResourceClient final
     : public CSSPreloaderResourceClient {
  public:
   PreloadRecordingCSSPreloaderResourceClient(Resource* resource,
                                              HTMLResourcePreloader* preloader)
       : CSSPreloaderResourceClient(resource, preloader) {}
 
   void fetchPreloads(PreloadRequestStream& preloads) override {
-    for (const auto& it : preloads)
+    for (const auto& it : preloads) {
       m_preloadUrls.push_back(it->resourceURL());
+      m_preloadReferrerPolicies.push_back(it->getReferrerPolicy());
+    }
     CSSPreloaderResourceClient::fetchPreloads(preloads);
   }
 
   Vector<String> m_preloadUrls;
+  Vector<ReferrerPolicy> m_preloadReferrerPolicies;
 };
 
 class CSSPreloadScannerTest : public ::testing::Test {};
 
 }  // namespace
 
 TEST_F(CSSPreloadScannerTest, ScanFromResourceClient) {
   std::unique_ptr<DummyPageHolder> dummyPageHolder =
       DummyPageHolder::create(IntSize(500, 500));
   dummyPageHolder->document().settings()->setCSSExternalScannerNoPreload(true);
@@ skipping 90 matching lines @@
   dummyPageHolder->document().shutdown();
 
   const char* data = "@import url('http://127.0.0.1/preload.css');";
   resource->appendData(data, strlen(data));
 
   // Do not expect to gather any preloads, as the document loader is invalid,
   // which means we can't notify WebLoadingBehaviorData of the preloads.
   EXPECT_EQ(0u, resourceClient->m_preloadUrls.size());
 }
 
+TEST_F(CSSPreloadScannerTest, ReferrerPolicyHeader) {
+  std::unique_ptr<DummyPageHolder> dummyPageHolder =
+      DummyPageHolder::create(IntSize(500, 500));
+  dummyPageHolder->document().settings()->setCSSExternalScannerPreload(true);
+
+  MockHTMLResourcePreloader* preloader = new MockHTMLResourcePreloader(
+      dummyPageHolder->document(), "http://127.0.0.1/foo.css");
+
+  KURL url(ParsedURLString, "http://127.0.0.1/foo.css");
+  ResourceResponse response;
+  response.setURL(url);
+  response.setHTTPStatusCode(200);
+  response.setHTTPHeaderField("referrer-policy", "unsafe-url");
+  CSSStyleSheetResource* resource =
+      CSSStyleSheetResource::createForTest(ResourceRequest(url), "utf-8");
+  resource->setStatus(ResourceStatus::Pending);
+  resource->setResponse(response);
+
+  PreloadRecordingCSSPreloaderResourceClient* resourceClient =
+      new PreloadRecordingCSSPreloaderResourceClient(resource, preloader);
+
+  KURL preloadURL(ParsedURLString, "http://127.0.0.1/preload.css");
+  Platform::current()->getURLLoaderMockFactory()->registerURL(
+      preloadURL, WrappedResourceResponse(ResourceResponse()), "");
+
+  const char* data = "@import url('http://127.0.0.1/preload.css');";
+  resource->appendData(data, strlen(data));
+
+  EXPECT_EQ(Resource::PreloadNotReferenced, resource->getPreloadResult());
+  EXPECT_EQ(1u, resourceClient->m_preloadUrls.size());
+  EXPECT_EQ("http://127.0.0.1/preload.css",
+            resourceClient->m_preloadUrls.front());
+  EXPECT_EQ(ReferrerPolicyAlways,
+            resourceClient->m_preloadReferrerPolicies.front());
+}
+
 }  // namespace blink