1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
|
// Copyright 2018 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "content/public/test/test_utils.h"
#include "extensions/common/constants.h"
#include "extensions/common/extension.h"
#include "extensions/common/extension_builder.h"
#include "extensions/common/manifest.h"
#include "extensions/common/permissions/permissions_data.h"
#include "testing/gtest/include/gtest/gtest.h"
#include "url/gurl.h"
namespace extensions {
namespace {
constexpr int kTabId = 42;
}
TEST(ComponentExtensionUrlPattern, AllUrls) {
// Component extensions do not have access to "chrome" scheme URLs through
// the "<all_urls>" meta-pattern.
auto all_urls = ExtensionBuilder("all urls")
.AddHostPermission("<all_urls>")
.SetLocation(mojom::ManifestLocation::kComponent)
.Build();
std::string error;
EXPECT_FALSE(all_urls->permissions_data()->CanAccessPage(
content::GetWebUIURL("settings"), kTabId, &error))
<< error;
// Non-chrome scheme should be fine.
EXPECT_TRUE(all_urls->permissions_data()->CanAccessPage(
GURL("https://example.com"), kTabId, &error))
<< error;
}
TEST(ComponentExtensionUrlPattern, ChromeVoxExtension) {
// The ChromeVox extension has access to "chrome" scheme URLs through the
// "<all_urls>" meta-pattern because it's allowlisted.
auto all_urls = ExtensionBuilder("all urls")
.AddHostPermission("<all_urls>")
.SetLocation(mojom::ManifestLocation::kComponent)
.SetID(extension_misc::kChromeVoxExtensionId)
.Build();
std::string error;
EXPECT_TRUE(all_urls->permissions_data()->CanAccessPage(
content::GetWebUIURL("settings"), kTabId, &error))
<< error;
}
TEST(ComponentExtensionUrlPattern, ExplicitChromeUrl) {
// Explicitly specifying a pattern that allows access to the chrome
// scheme is OK.
auto chrome_urls = ExtensionBuilder("chrome urls")
.AddHostPermission(content::GetWebUIURLString("*/*"))
.SetLocation(mojom::ManifestLocation::kComponent)
.Build();
std::string error;
EXPECT_TRUE(chrome_urls->permissions_data()->CanAccessPage(
content::GetWebUIURL("settings"), kTabId, &error))
<< error;
}
} // namespace extensions
|
