Move container policy logic to frame owner classes.

third_party/WebKit/Source/core/html/HTMLIFrameElementTest.cpp

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "core/html/HTMLIFrameElement.h"
 
 #include "core/dom/Document.h"
 #include "testing/gtest/include/gtest/gtest.h"
 
 namespace blink {
@@ skipping 267 matching lines @@
       frame_element->ContainerPolicy();
 
   EXPECT_EQ(1UL, container_policy.size());
   EXPECT_EQ(WebFeaturePolicyFeature::kFullscreen, container_policy[0].feature);
   EXPECT_FALSE(container_policy[0].matches_all_origins);
   EXPECT_EQ(1UL, container_policy[0].origins.size());
   EXPECT_FALSE(container_policy[0].origins[0].IsUnique());
   EXPECT_EQ("http://example.net", container_policy[0].origins[0].ToString());
 }
 
+// Test the ConstructContainerPolicy method when no attributes are set on the
+// iframe element.
+TEST_F(HTMLIFrameElementTest, ConstructEmptyContainerPolicy) {
+  Document* document = Document::Create();
+  KURL document_url = KURL(KURL(), "http://example.com");
+  document->SetURL(document_url);
+  document->UpdateSecurityOrigin(SecurityOrigin::Create(document_url));
+
+  HTMLIFrameElement* frame_element = HTMLIFrameElement::Create(*document);
+
+  WebParsedFeaturePolicy container_policy =
+      frame_element->ConstructContainerPolicy();
+  EXPECT_EQ(0UL, container_policy.size());
+}
+
+// Test the ConstructContainerPolicy method when the "allow" attribute is used
+// to enable features in the frame.
+TEST_F(HTMLIFrameElementTest, ConstructContainerPolicy) {
+  Document* document = Document::Create();
+  KURL document_url = KURL(KURL(), "http://example.com");
+  document->SetURL(document_url);
+  document->UpdateSecurityOrigin(SecurityOrigin::Create(document_url));
+
+  HTMLIFrameElement* frame_element = HTMLIFrameElement::Create(*document);
+  frame_element->setAttribute(HTMLNames::allowAttr, "payment usb");
+  WebParsedFeaturePolicy container_policy =
+      frame_element->ConstructContainerPolicy();
+  EXPECT_EQ(2UL, container_policy.size());
+  EXPECT_EQ(WebFeaturePolicyFeature::kPayment, container_policy[0].feature);
+  EXPECT_FALSE(container_policy[0].matches_all_origins);
+  EXPECT_EQ(1UL, container_policy[0].origins.size());
+  EXPECT_TRUE(GetOriginForFeaturePolicy(frame_element)
+                  ->IsSameSchemeHostPortAndSuborigin(
+                      container_policy[0].origins[0].Get()));
+  EXPECT_EQ(WebFeaturePolicyFeature::kUsb, container_policy[1].feature);
+  EXPECT_FALSE(container_policy[1].matches_all_origins);
+  EXPECT_EQ(1UL, container_policy[1].origins.size());
+  EXPECT_TRUE(GetOriginForFeaturePolicy(frame_element)
+                  ->IsSameSchemeHostPortAndSuborigin(
+                      container_policy[1].origins[0].Get()));
+}
+
+// Test the ConstructContainerPolicy method when the "allowfullscreen" attribute
+// is used to enable fullscreen in the frame.
+TEST_F(HTMLIFrameElementTest, ConstructContainerPolicyWithAllowFullscreen) {
+  Document* document = Document::Create();
+  KURL document_url = KURL(KURL(), "http://example.com");
+  document->SetURL(document_url);
+  document->UpdateSecurityOrigin(SecurityOrigin::Create(document_url));
+
+  HTMLIFrameElement* frame_element = HTMLIFrameElement::Create(*document);
+  frame_element->SetBooleanAttribute(HTMLNames::allowfullscreenAttr, true);
+
+  WebParsedFeaturePolicy container_policy =
+      frame_element->ConstructContainerPolicy();
+  EXPECT_EQ(1UL, container_policy.size());
+  EXPECT_EQ(WebFeaturePolicyFeature::kFullscreen, container_policy[0].feature);
+  EXPECT_TRUE(container_policy[0].matches_all_origins);
+}
+
+// Test the ConstructContainerPolicy method when the "allowpaymentrequest"
+// attribute is used to enable the paymentrequest API in the frame.
+TEST_F(HTMLIFrameElementTest, ConstructContainerPolicyWithAllowPaymentRequest) {
+  Document* document = Document::Create();
+  KURL document_url = KURL(KURL(), "http://example.com");
+  document->SetURL(document_url);
+  document->UpdateSecurityOrigin(SecurityOrigin::Create(document_url));
+
+  HTMLIFrameElement* frame_element = HTMLIFrameElement::Create(*document);
+  frame_element->setAttribute(HTMLNames::allowAttr, "usb");
+  frame_element->SetBooleanAttribute(HTMLNames::allowpaymentrequestAttr, true);
+
+  WebParsedFeaturePolicy container_policy =
+      frame_element->ConstructContainerPolicy();
+  EXPECT_EQ(2UL, container_policy.size());
+  EXPECT_EQ(WebFeaturePolicyFeature::kUsb, container_policy[0].feature);
+  EXPECT_FALSE(container_policy[0].matches_all_origins);
+  EXPECT_EQ(1UL, container_policy[0].origins.size());
+  EXPECT_TRUE(GetOriginForFeaturePolicy(frame_element)
+                  ->IsSameSchemeHostPortAndSuborigin(
+                      container_policy[0].origins[0].Get()));
+  EXPECT_EQ(WebFeaturePolicyFeature::kPayment, container_policy[1].feature);
+  EXPECT_TRUE(container_policy[1].matches_all_origins);
+}
+
+// Test the ConstructContainerPolicy method when both "allowfullscreen" and
+// "allowpaymentrequest" attributes are set on the iframe element, and the
+// "allow" attribute is also used to override the paymentrequest feature. In the
+// resulting container policy, the payment and usb features should be enabled
+// only for the frame's origin, (since the allow attribute overrides
+// allowpaymentrequest,) while fullscreen should be enabled for all origins.
+TEST_F(HTMLIFrameElementTest, ConstructContainerPolicyWithAllowAttributes) {
+  Document* document = Document::Create();
+  KURL document_url = KURL(KURL(), "http://example.com");
+  document->SetURL(document_url);
+  document->UpdateSecurityOrigin(SecurityOrigin::Create(document_url));
+
+  HTMLIFrameElement* frame_element = HTMLIFrameElement::Create(*document);
+  frame_element->setAttribute(HTMLNames::allowAttr, "payment usb");
+  frame_element->SetBooleanAttribute(HTMLNames::allowfullscreenAttr, true);
+  frame_element->SetBooleanAttribute(HTMLNames::allowpaymentrequestAttr, true);
+
+  WebParsedFeaturePolicy container_policy =
+      frame_element->ConstructContainerPolicy();
+  EXPECT_EQ(3UL, container_policy.size());
+  EXPECT_EQ(WebFeaturePolicyFeature::kPayment, container_policy[0].feature);
+  EXPECT_FALSE(container_policy[0].matches_all_origins);
+  EXPECT_EQ(1UL, container_policy[0].origins.size());
+  EXPECT_TRUE(GetOriginForFeaturePolicy(frame_element)
+                  ->IsSameSchemeHostPortAndSuborigin(
+                      container_policy[0].origins[0].Get()));
+  EXPECT_EQ(WebFeaturePolicyFeature::kUsb, container_policy[1].feature);
+  EXPECT_FALSE(container_policy[1].matches_all_origins);
+  EXPECT_EQ(1UL, container_policy[1].origins.size());
+  EXPECT_TRUE(GetOriginForFeaturePolicy(frame_element)
+                  ->IsSameSchemeHostPortAndSuborigin(
+                      container_policy[1].origins[0].Get()));
+  EXPECT_EQ(WebFeaturePolicyFeature::kFullscreen, container_policy[2].feature);
+  EXPECT_TRUE(container_policy[2].matches_all_origins);
+}
+
 }  // namespace blink