CSP: Enable whitelisting of external JavaScript via hashes

third_party/WebKit/Source/core/frame/csp/ContentSecurityPolicyTest.cpp

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "core/frame/csp/ContentSecurityPolicy.h"
 
 #include "core/dom/Document.h"
 #include "core/frame/csp/CSPDirectiveList.h"
 #include "core/html/HTMLScriptElement.h"
 #include "core/loader/DocumentLoader.h"
@@ skipping 112 matching lines @@
   csp->didReceiveHeader("img-src http://example.com",
                         ContentSecurityPolicyHeaderTypeReport,
                         ContentSecurityPolicyHeaderSourceHTTP);
 
   KURL exampleUrl(KURL(), "http://example.com");
   KURL notExampleUrl(KURL(), "http://not-example.com");
 
   ContentSecurityPolicy* csp2 = ContentSecurityPolicy::create();
   csp2->copyStateFrom(csp.get());
   EXPECT_FALSE(csp2->allowScriptFromSource(
-      exampleUrl, String(), ParserInserted,
+      exampleUrl, String(), IntegrityMetadataSet(), ParserInserted,
       ResourceRequest::RedirectStatus::NoRedirect,
       SecurityViolationReportingPolicy::SuppressReporting));
   EXPECT_TRUE(csp2->allowPluginType(
       "application/x-type-1", "application/x-type-1", exampleUrl,
       SecurityViolationReportingPolicy::SuppressReporting));
   EXPECT_TRUE(csp2->allowImageFromSource(
       exampleUrl, ResourceRequest::RedirectStatus::NoRedirect,
       SecurityViolationReportingPolicy::SuppressReporting));
   EXPECT_FALSE(csp2->allowImageFromSource(
       notExampleUrl, ResourceRequest::RedirectStatus::NoRedirect,
@@ skipping 10 matching lines @@
   csp->didReceiveHeader("img-src http://example.com",
                         ContentSecurityPolicyHeaderTypeEnforce,
                         ContentSecurityPolicyHeaderSourceHTTP);
 
   KURL exampleUrl(KURL(), "http://example.com");
   KURL notExampleUrl(KURL(), "http://not-example.com");
 
   ContentSecurityPolicy* csp2 = ContentSecurityPolicy::create();
   csp2->copyPluginTypesFrom(csp.get());
   EXPECT_TRUE(csp2->allowScriptFromSource(
-      exampleUrl, String(), ParserInserted,
+      exampleUrl, String(), IntegrityMetadataSet(), ParserInserted,
       ResourceRequest::RedirectStatus::NoRedirect,
       SecurityViolationReportingPolicy::SuppressReporting));
   EXPECT_TRUE(csp2->allowPluginType(
       "application/x-type-1", "application/x-type-1", exampleUrl,
       SecurityViolationReportingPolicy::SuppressReporting));
   EXPECT_TRUE(csp2->allowImageFromSource(
       exampleUrl, ResourceRequest::RedirectStatus::NoRedirect,
       SecurityViolationReportingPolicy::SuppressReporting));
   EXPECT_TRUE(csp2->allowImageFromSource(
       notExampleUrl, ResourceRequest::RedirectStatus::NoRedirect,
@@ skipping 480 matching lines @@
 
     unsigned expectedReports = test.allowed ? 0u : 1u;
 
     // Single enforce-mode policy should match `test.expected`:
     Persistent<ContentSecurityPolicy> policy = ContentSecurityPolicy::create();
     policy->bindToExecutionContext(document.get());
     policy->didReceiveHeader(test.policy,
                              ContentSecurityPolicyHeaderTypeEnforce,
                              ContentSecurityPolicyHeaderSourceHTTP);
     EXPECT_EQ(test.allowed, policy->allowScriptFromSource(
-                                resource, String(test.nonce), ParserInserted));
+                                resource, String(test.nonce),
+                                IntegrityMetadataSet(), ParserInserted));
     // If this is expected to generate a violation, we should have sent a
     // report.
     EXPECT_EQ(expectedReports, policy->m_violationReportsSent.size());
 
     // Single report-mode policy should always be `true`:
     policy = ContentSecurityPolicy::create();
     policy->bindToExecutionContext(document.get());
     policy->didReceiveHeader(test.policy, ContentSecurityPolicyHeaderTypeReport,
                              ContentSecurityPolicyHeaderSourceHTTP);
-    EXPECT_TRUE(policy->allowScriptFromSource(resource, String(test.nonce),
-                                              ParserInserted));
+    EXPECT_TRUE(policy->allowScriptFromSource(
+        resource, String(test.nonce), IntegrityMetadataSet(), ParserInserted));
     // If this is expected to generate a violation, we should have sent a
     // report, even though we don't deny access in `allowScriptFromSource`:
     EXPECT_EQ(expectedReports, policy->m_violationReportsSent.size());
   }
 }
 
 TEST_F(ContentSecurityPolicyTest, NonceInline) {
   struct TestCase {
     const char* policy;
     const char* nonce;
@@ skipping 121 matching lines @@
     // Enforce / Report
     Persistent<ContentSecurityPolicy> policy = ContentSecurityPolicy::create();
     policy->bindToExecutionContext(document.get());
     policy->didReceiveHeader(test.policy1,
                              ContentSecurityPolicyHeaderTypeEnforce,
                              ContentSecurityPolicyHeaderSourceHTTP);
     policy->didReceiveHeader(test.policy2,
                              ContentSecurityPolicyHeaderTypeReport,
                              ContentSecurityPolicyHeaderSourceHTTP);
     EXPECT_EQ(test.allowed1, policy->allowScriptFromSource(
-                                 resource, String(test.nonce), ParserInserted));
+                                 resource, String(test.nonce),
+                                 IntegrityMetadataSet(), ParserInserted));
     EXPECT_EQ(expectedReports, policy->m_violationReportsSent.size());
 
     // Report / Enforce
     policy = ContentSecurityPolicy::create();
     policy->bindToExecutionContext(document.get());
     policy->didReceiveHeader(test.policy1,
                              ContentSecurityPolicyHeaderTypeReport,
                              ContentSecurityPolicyHeaderSourceHTTP);
     policy->didReceiveHeader(test.policy2,
                              ContentSecurityPolicyHeaderTypeEnforce,
                              ContentSecurityPolicyHeaderSourceHTTP);
     EXPECT_EQ(test.allowed2, policy->allowScriptFromSource(
-                                 resource, String(test.nonce), ParserInserted));
+                                 resource, String(test.nonce),
+                                 IntegrityMetadataSet(), ParserInserted));
     EXPECT_EQ(expectedReports, policy->m_violationReportsSent.size());
 
     // Enforce / Enforce
     policy = ContentSecurityPolicy::create();
     policy->bindToExecutionContext(document.get());
     policy->didReceiveHeader(test.policy1,
                              ContentSecurityPolicyHeaderTypeEnforce,
                              ContentSecurityPolicyHeaderSourceHTTP);
     policy->didReceiveHeader(test.policy2,
                              ContentSecurityPolicyHeaderTypeEnforce,
                              ContentSecurityPolicyHeaderSourceHTTP);
-    EXPECT_EQ(test.allowed1 && test.allowed2,
-              policy->allowScriptFromSource(resource, String(test.nonce),
-                                            ParserInserted));
+    EXPECT_EQ(
+        test.allowed1 && test.allowed2,
+        policy->allowScriptFromSource(resource, String(test.nonce),
+                                      IntegrityMetadataSet(), ParserInserted));
     EXPECT_EQ(expectedReports, policy->m_violationReportsSent.size());
 
     // Report / Report
     policy = ContentSecurityPolicy::create();
     policy->bindToExecutionContext(document.get());
     policy->didReceiveHeader(test.policy1,
                              ContentSecurityPolicyHeaderTypeReport,
                              ContentSecurityPolicyHeaderSourceHTTP);
     policy->didReceiveHeader(test.policy2,
                              ContentSecurityPolicyHeaderTypeReport,
                              ContentSecurityPolicyHeaderSourceHTTP);
-    EXPECT_TRUE(policy->allowScriptFromSource(resource, String(test.nonce),
-                                              ParserInserted));
+    EXPECT_TRUE(policy->allowScriptFromSource(
+        resource, String(test.nonce), IntegrityMetadataSet(), ParserInserted));
     EXPECT_EQ(expectedReports, policy->m_violationReportsSent.size());
   }
 }
 
 TEST_F(ContentSecurityPolicyTest, ShouldEnforceEmbeddersPolicy) {
   struct TestCase {
     const char* resourceURL;
     const bool inherits;
   } cases[] = {
       // Same-origin
@@ skipping 243 matching lines @@
                                 String(), IntegrityMetadataSet(),
                                 ParserInserted,
                                 ResourceRequest::RedirectStatus::NoRedirect,
                                 SecurityViolationReportingPolicy::SuppressReporting));
 
   SchemeRegistry::removeURLSchemeRegisteredAsBypassingContentSecurityPolicy(
       "https");
 }
 
 }  // namespace blink