Introduce support for origins that require process isolation.

content/browser/child_process_security_policy_unittest.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <set>
 #include <string>
 
 #include "base/files/file_path.h"
 #include "content/browser/child_process_security_policy_impl.h"
 #include "content/public/common/url_constants.h"
@@ skipping 875 matching lines @@
   EXPECT_TRUE(p->CanCommitURL(kRendererID, url_foo1));
   EXPECT_TRUE(p->CanCommitURL(kRendererID, url_foo2));
   EXPECT_TRUE(p->CanCommitURL(kRendererID, url_bar));
   EXPECT_TRUE(p->CanSetAsOriginHeader(kRendererID, url_foo1));
   EXPECT_TRUE(p->CanSetAsOriginHeader(kRendererID, url_foo2));
   EXPECT_TRUE(p->CanSetAsOriginHeader(kRendererID, url_bar));
 
   p->Remove(kRendererID);
 }
 
+// Verifies parsing logic that extracts origins from --isolate-origins.
+TEST_F(ChildProcessSecurityPolicyTest, IsolateOriginsFromCommandLine) {
+  // Invalid and unique origins are not permitted.
+  auto* policy = ChildProcessSecurityPolicyImpl::GetInstance();
+  policy->AddIsolatedOriginsFromCommandLine("foo");
+  policy->AddIsolatedOriginsFromCommandLine("");
+  policy->AddIsolatedOriginsFromCommandLine("about:blank");
+  EXPECT_EQ(0U, policy->isolated_origins_.size());
+
+  policy->AddIsolatedOriginsFromCommandLine("http://isolated.foo.com");
+  EXPECT_EQ(1U, policy->isolated_origins_.size());
+  EXPECT_TRUE(
+      policy->IsIsolatedOrigin(url::Origin(GURL("http://isolated.foo.com"))));
+
+  policy->AddIsolatedOriginsFromCommandLine(
+      "http://a.com,https://b.com,,https://c.com:8000");
+  EXPECT_EQ(4U, policy->isolated_origins_.size());
+  EXPECT_TRUE(
+      policy->IsIsolatedOrigin(url::Origin(GURL("http://isolated.foo.com"))));
+  EXPECT_TRUE(policy->IsIsolatedOrigin(url::Origin(GURL("http://a.com"))));
+  EXPECT_TRUE(policy->IsIsolatedOrigin(url::Origin(GURL("https://b.com"))));
+  EXPECT_TRUE(
+      policy->IsIsolatedOrigin(url::Origin(GURL("https://c.com:8000"))));
+}
+
 }  // namespace content