Implement new referrer policies

third_party/WebKit/Source/platform/weborigin/SecurityPolicyTest.cpp

 /*
  * Copyright (C) 2014 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 84 matching lines @@
   TestCase inputs[] = {
       // HTTP -> HTTP: Same Origin
       {kReferrerPolicyAlways, kInsecureURLA, kInsecureURLA, kInsecureURLA},
       {kReferrerPolicyDefault, kInsecureURLA, kInsecureURLA, kInsecureURLA},
       {kReferrerPolicyNoReferrerWhenDowngrade, kInsecureURLA, kInsecureURLA,
        kInsecureURLA},
       {kReferrerPolicyNever, kInsecureURLA, kInsecureURLA, 0},
       {kReferrerPolicyOrigin, kInsecureURLA, kInsecureURLA, kInsecureOriginA},
       {kReferrerPolicyOriginWhenCrossOrigin, kInsecureURLA, kInsecureURLA,
        kInsecureURLA},
+      {kReferrerPolicySameOrigin, kInsecureURLA, kInsecureURLA, kInsecureURLA},
+      {kReferrerPolicyStrictOrigin, kInsecureURLA, kInsecureURLA,
+       kInsecureOriginA},
+      {kReferrerPolicyNoReferrerWhenDowngradeOriginWhenCrossOrigin,
+       kInsecureURLA, kInsecureURLA, kInsecureURLA},
 
       // HTTP -> HTTP: Cross Origin
       {kReferrerPolicyAlways, kInsecureURLA, kInsecureURLB, kInsecureURLA},
       {kReferrerPolicyDefault, kInsecureURLA, kInsecureURLB, kInsecureURLA},
       {kReferrerPolicyNoReferrerWhenDowngrade, kInsecureURLA, kInsecureURLB,
        kInsecureURLA},
       {kReferrerPolicyNever, kInsecureURLA, kInsecureURLB, 0},
       {kReferrerPolicyOrigin, kInsecureURLA, kInsecureURLB, kInsecureOriginA},
       {kReferrerPolicyOriginWhenCrossOrigin, kInsecureURLA, kInsecureURLB,
        kInsecureOriginA},
+      {kReferrerPolicySameOrigin, kInsecureURLA, kInsecureURLB, 0},
+      {kReferrerPolicyStrictOrigin, kInsecureURLA, kInsecureURLB,
+       kInsecureOriginA},
+      {kReferrerPolicyNoReferrerWhenDowngradeOriginWhenCrossOrigin,
+       kInsecureURLA, kInsecureURLB, kInsecureOriginA},
 
       // HTTPS -> HTTPS: Same Origin
       {kReferrerPolicyAlways, kSecureURLA, kSecureURLA, kSecureURLA},
       {kReferrerPolicyDefault, kSecureURLA, kSecureURLA, kSecureURLA},
       {kReferrerPolicyNoReferrerWhenDowngrade, kSecureURLA, kSecureURLA,
        kSecureURLA},
       {kReferrerPolicyNever, kSecureURLA, kSecureURLA, 0},
       {kReferrerPolicyOrigin, kSecureURLA, kSecureURLA, kSecureOriginA},
       {kReferrerPolicyOriginWhenCrossOrigin, kSecureURLA, kSecureURLA,
        kSecureURLA},
+      {kReferrerPolicySameOrigin, kSecureURLA, kSecureURLA, kSecureURLA},
+      {kReferrerPolicyStrictOrigin, kSecureURLA, kSecureURLA, kSecureOriginA},
+      {kReferrerPolicyNoReferrerWhenDowngradeOriginWhenCrossOrigin, kSecureURLA,
+       kSecureURLA, kSecureURLA},
 
       // HTTPS -> HTTPS: Cross Origin
       {kReferrerPolicyAlways, kSecureURLA, kSecureURLB, kSecureURLA},
       {kReferrerPolicyDefault, kSecureURLA, kSecureURLB, kSecureURLA},
       {kReferrerPolicyNoReferrerWhenDowngrade, kSecureURLA, kSecureURLB,
        kSecureURLA},
       {kReferrerPolicyNever, kSecureURLA, kSecureURLB, 0},
       {kReferrerPolicyOrigin, kSecureURLA, kSecureURLB, kSecureOriginA},
       {kReferrerPolicyOriginWhenCrossOrigin, kSecureURLA, kSecureURLB,
        kSecureOriginA},
+      {kReferrerPolicySameOrigin, kSecureURLA, kSecureURLB, 0},
+      {kReferrerPolicyStrictOrigin, kSecureURLA, kSecureURLB, kSecureOriginA},
+      {kReferrerPolicyNoReferrerWhenDowngradeOriginWhenCrossOrigin, kSecureURLA,
+       kSecureURLB, kSecureOriginA},
 
       // HTTP -> HTTPS
       {kReferrerPolicyAlways, kInsecureURLA, kSecureURLB, kInsecureURLA},
       {kReferrerPolicyDefault, kInsecureURLA, kSecureURLB, kInsecureURLA},
       {kReferrerPolicyNoReferrerWhenDowngrade, kInsecureURLA, kSecureURLB,
        kInsecureURLA},
       {kReferrerPolicyNever, kInsecureURLA, kSecureURLB, 0},
       {kReferrerPolicyOrigin, kInsecureURLA, kSecureURLB, kInsecureOriginA},
       {kReferrerPolicyOriginWhenCrossOrigin, kInsecureURLA, kSecureURLB,
        kInsecureOriginA},
+      {kReferrerPolicySameOrigin, kInsecureURLA, kSecureURLB, 0},
+      {kReferrerPolicyStrictOrigin, kInsecureURLA, kSecureURLB,
+       kInsecureOriginA},
+      {kReferrerPolicyNoReferrerWhenDowngradeOriginWhenCrossOrigin,
+       kInsecureURLA, kSecureURLB, kInsecureOriginA},
 
       // HTTPS -> HTTP
       {kReferrerPolicyAlways, kSecureURLA, kInsecureURLB, kSecureURLA},
       {kReferrerPolicyDefault, kSecureURLA, kInsecureURLB, 0},
       {kReferrerPolicyNoReferrerWhenDowngrade, kSecureURLA, kInsecureURLB, 0},
       {kReferrerPolicyNever, kSecureURLA, kInsecureURLB, 0},
       {kReferrerPolicyOrigin, kSecureURLA, kInsecureURLB, kSecureOriginA},
       {kReferrerPolicyOriginWhenCrossOrigin, kSecureURLA, kSecureURLB,
        kSecureOriginA},
+      {kReferrerPolicySameOrigin, kSecureURLA, kInsecureURLB, 0},
+      {kReferrerPolicyStrictOrigin, kSecureURLA, kInsecureURLB, 0},
+      {kReferrerPolicyNoReferrerWhenDowngradeOriginWhenCrossOrigin, kSecureURLA,
+       kInsecureURLB, 0},
 
       // blob and filesystem URL handling
       {kReferrerPolicyAlways, kInsecureURLA, kBlobURL, 0},
       {kReferrerPolicyAlways, kBlobURL, kInsecureURLA, 0},
       {kReferrerPolicyAlways, kInsecureURLA, kFilesystemURL, 0},
       {kReferrerPolicyAlways, kFilesystemURL, kInsecureURLA, 0},
   };
 
   for (TestCase test : inputs) {
     KURL destination(kParsedURLString, test.destination);
@@ skipping 53 matching lines @@
 
     EXPECT_FALSE(origin1->IsPotentiallyTrustworthy());
     EXPECT_FALSE(origin2->IsPotentiallyTrustworthy());
     SecurityPolicy::AddOriginTrustworthyWhiteList(origin1);
     EXPECT_TRUE(origin1->IsPotentiallyTrustworthy());
     EXPECT_TRUE(origin2->IsPotentiallyTrustworthy());
   }
 }
 
 }  // namespace blink