Implement CanRequest in BaseFetchContext

third_party/WebKit/Source/core/loader/FrameFetchContextTest.cpp

 /*
  * Copyright (c) 2015, Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 451 matching lines @@
     SetFrameOwnerBasedOnFrameType(test.frame_type, iframe,
                                   another_required_csp);
     ExpectSetEmbeddingCSPRequestHeader(
         test.to_request, test.frame_type,
         test.frame_type == WebURLRequest::kFrameTypeNested
             ? another_required_csp
             : g_null_atom);
   }
 }
 
-// Tests that CanFollowRedirect() checks both report-only and enforced CSP
-// headers.
-TEST_F(FrameFetchContextTest, RedirectChecksReportedAndEnforcedCSP) {
-  ContentSecurityPolicy* policy = document->GetContentSecurityPolicy();
-  policy->DidReceiveHeader("script-src https://foo.test",
-                           kContentSecurityPolicyHeaderTypeEnforce,
-                           kContentSecurityPolicyHeaderSourceHTTP);
-  policy->DidReceiveHeader("script-src https://bar.test",
-                           kContentSecurityPolicyHeaderTypeReport,
-                           kContentSecurityPolicyHeaderSourceHTTP);
-  KURL url(KURL(), "http://baz.test");
-  ResourceRequest resource_request(url);
-  resource_request.SetRequestContext(WebURLRequest::kRequestContextScript);
-  EXPECT_EQ(
-      ResourceRequestBlockedReason::CSP,
-      fetch_context->CanFollowRedirect(
-          Resource::kScript, resource_request, url, ResourceLoaderOptions(),
-          SecurityViolationReportingPolicy::kReport,
-          FetchParameters::kUseDefaultOriginRestrictionForType));
-  EXPECT_EQ(2u, policy->violation_reports_sent_.size());
-}
-
-// Tests that AllowResponse() checks both report-only and enforced CSP headers.
-TEST_F(FrameFetchContextTest, AllowResponseChecksReportedAndEnforcedCSP) {
-  ContentSecurityPolicy* policy = document->GetContentSecurityPolicy();
-  policy->DidReceiveHeader("script-src https://foo.test",
-                           kContentSecurityPolicyHeaderTypeEnforce,
-                           kContentSecurityPolicyHeaderSourceHTTP);
-  policy->DidReceiveHeader("script-src https://bar.test",
-                           kContentSecurityPolicyHeaderTypeReport,
-                           kContentSecurityPolicyHeaderSourceHTTP);
-  KURL url(KURL(), "http://baz.test");
-  ResourceRequest resource_request(url);
-  resource_request.SetRequestContext(WebURLRequest::kRequestContextScript);
-  EXPECT_EQ(ResourceRequestBlockedReason::CSP,
-            fetch_context->AllowResponse(Resource::kScript, resource_request,
-                                         url, ResourceLoaderOptions()));
-  EXPECT_EQ(2u, policy->violation_reports_sent_.size());
-}
-
 // Tests that PopulateResourceRequest() checks report-only CSP headers, so that
 // any violations are reported before the request is modified.
 TEST_F(FrameFetchContextTest, PopulateResourceRequestChecksReportOnlyCSP) {
   ContentSecurityPolicy* policy = document->GetContentSecurityPolicy();
   policy->DidReceiveHeader(
       "upgrade-insecure-requests; script-src https://foo.test",
       kContentSecurityPolicyHeaderTypeEnforce,
       kContentSecurityPolicyHeaderSourceHTTP);
   policy->DidReceiveHeader("script-src https://bar.test",
                            kContentSecurityPolicyHeaderTypeReport,
@@ skipping 444 matching lines @@
   SetFilterPolicy(WebDocumentSubresourceFilter::kWouldDisallow);
 
   EXPECT_EQ(ResourceRequestBlockedReason::kNone, CanRequest());
   EXPECT_EQ(0, GetFilteredLoadCallCount());
 
   EXPECT_EQ(ResourceRequestBlockedReason::kNone, CanRequestPreload());
   EXPECT_EQ(0, GetFilteredLoadCallCount());
 }
 
 }  // namespace blink