1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
|
// Copyright 2011 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "base/command_line.h"
#include "build/build_config.h"
#include "chrome/browser/extensions/extension_apitest.h"
#include "chrome/browser/extensions/extension_service.h"
#include "chrome/browser/profiles/profile.h"
#include "chrome/browser/ui/browser.h"
#include "chrome/browser/ui/search/ntp_test_utils.h"
#include "chrome/common/url_constants.h"
#include "chrome/test/base/ui_test_utils.h"
#include "components/crx_file/id_util.h"
#include "content/public/test/browser_test.h"
#include "extensions/browser/extension_registry.h"
#include "extensions/common/extension.h"
#include "extensions/common/extensions_client.h"
#include "extensions/test/extension_test_message_listener.h"
#include "net/test/embedded_test_server/embedded_test_server.h"
namespace extensions {
namespace {
const char kAllUrlsTarget[] = "/extensions/api_test/all_urls/index.html";
} // namespace
class AllUrlsApiTest : public ExtensionApiTest {
public:
AllUrlsApiTest(const AllUrlsApiTest&) = delete;
AllUrlsApiTest& operator=(const AllUrlsApiTest&) = delete;
protected:
AllUrlsApiTest() = default;
~AllUrlsApiTest() override = default;
const Extension* content_script() const { return content_script_.get(); }
const Extension* execute_script() const { return execute_script_.get(); }
void AllowlistExtensions() {
ExtensionsClient::ScriptingAllowlist allowlist;
allowlist.push_back(content_script_->id());
allowlist.push_back(execute_script_->id());
ExtensionsClient::Get()->SetScriptingAllowlist(allowlist);
// Extensions will have certain permissions withheld at initialization if
// they aren't allowlisted, so we need to reload them.
ExtensionTestMessageListener listener("execute: ready");
extension_registrar()->ReloadExtension(content_script_->id());
extension_registrar()->ReloadExtension(execute_script_->id());
ASSERT_TRUE(listener.WaitUntilSatisfied());
}
void NavigateAndWait(const std::string& url) {
std::string expected_url = url;
if (url == chrome::kChromeUINewTabURL) {
expected_url =
ntp_test_utils::GetFinalNtpUrl(browser()->profile()).spec();
}
ExtensionTestMessageListener listener_a("content script: " + expected_url);
ExtensionTestMessageListener listener_b("execute: " + expected_url);
ASSERT_TRUE(ui_test_utils::NavigateToURL(browser(), GURL(url)));
ASSERT_TRUE(listener_a.WaitUntilSatisfied());
ASSERT_TRUE(listener_b.WaitUntilSatisfied());
}
private:
void SetUpOnMainThread() override {
ExtensionApiTest::SetUpOnMainThread();
base::FilePath data_dir = test_data_dir_.AppendASCII("all_urls");
content_script_ = LoadExtension(data_dir.AppendASCII("content_script"));
ASSERT_TRUE(content_script_);
execute_script_ = LoadExtension(data_dir.AppendASCII("execute_script"));
ASSERT_TRUE(execute_script_);
}
scoped_refptr<const Extension> content_script_;
scoped_refptr<const Extension> execute_script_;
};
IN_PROC_BROWSER_TEST_F(AllUrlsApiTest, AllowlistedExtension) {
AllowlistExtensions();
auto* bystander = LoadExtension(
test_data_dir_.AppendASCII("all_urls").AppendASCII("bystander"));
ASSERT_TRUE(bystander);
ASSERT_TRUE(StartEmbeddedTestServer());
// Now verify that we run content scripts on different URLs, including
// data URLs, regular HTTP pages, and resource URLs from extensions.
const std::string test_urls[] = {
"data:text/html;charset=utf-8,<html>asdf</html>",
embedded_test_server()->GetURL(kAllUrlsTarget).spec(),
bystander->ResolveExtensionURL("page.html").spec()};
for (const auto& test_url : test_urls)
NavigateAndWait(test_url);
}
// Test that an extension NOT allowlisted for scripting can ask for <all_urls>
// and run scripts on non-restricted all pages.
IN_PROC_BROWSER_TEST_F(AllUrlsApiTest, RegularExtensions) {
// Now verify we can script a regular http page.
ASSERT_TRUE(StartEmbeddedTestServer());
NavigateAndWait(embedded_test_server()->GetURL(kAllUrlsTarget).spec());
}
} // namespace extensions
|
