[Test] Added a test for activeTab URL filtering

chrome/test/data/extensions/api_test/active_tab/background.js

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 var assertEq = chrome.test.assertEq;
 var assertFalse = chrome.test.assertFalse;
 var assertTrue = chrome.test.assertTrue;
 var callbackFail = chrome.test.callbackFail;
 var callbackPass = chrome.test.callbackPass;
 
@@ skipping 24 matching lines @@
     iframeDone();
   }
 });
 
 var iframeUrl = chrome.extension.getURL('iframe.html');
 var injectIframe =
     'var iframe = document.createElement("iframe");\n' +
     'iframe.src = "' + iframeUrl + '";\n' +
     'document.body.appendChild(iframe);\n';
 
+var runCount = 0;
+
 chrome.browserAction.onClicked.addListener(function(tab) {
+  runCount++;
+  if (runCount == 1) {
+    // First pass is done without granting activeTab permission, the extension
+    // shouldn't have access to tab.url here.
+    assertFalse(!!tab.url);
+    chrome.test.succeed();
+    return;
+  } else if (runCount == 3) {
+    // Third pass is done in a public session, and activeTab permission is
+    // granted to the extension. URL should be scrubbed down to the origin here
+    // (tested at the C++ side).
+    chrome.test.sendMessage(tab.url);
+    chrome.test.succeed();
+    return;
+  }
+  // Second pass is done with granting activeTab permission, the extension
+  // should have full access to the page (and also to tab.url).
+
   iframeDone = chrome.test.callbackAdded();
   cachedUrl = tab.url;
   chrome.tabs.executeScript({ code: injectIframe }, callbackPass());
   assertTrue(canXhr(tab.url));
 
   chrome.automation.getTree(callbackPass(function(rootNode) {
     assertFalse(rootNode == undefined);
     assertEq(RoleType.ROOT_WEB_AREA, rootNode.role);
   }));
 });
 
 chrome.webNavigation.onCompleted.addListener(function(details) {
   chrome.tabs.executeScript({ code: 'true' }, callbackFail(
          'Cannot access contents of the page. ' +
          'Extension manifest must request permission to access the ' +
          'respective host.'));
 
   chrome.automation.getTree(callbackFail(
       'Cannot request automation tree on url "' + details.url +
         '". Extension manifest must request permission to access this host.'));
 
   assertFalse(canXhr(details.url));
 });