File: pdf_extension_test.cc

package info (click to toggle)
chromium 139.0.7258.127-1
links: PTS, VCS
area: main
in suites:
size: 6,122,068 kB
sloc: cpp: 35,100,771; ansic: 7,163,530; javascript: 4,103,002; python: 1,436,920; asm: 946,517; xml: 746,709; pascal: 187,653; perl: 88,691; sh: 88,436; objc: 79,953; sql: 51,488; cs: 44,583; fortran: 24,137; makefile: 22,147; tcl: 15,277; php: 13,980; yacc: 8,984; ruby: 7,485; awk: 3,720; lisp: 3,096; lex: 1,327; ada: 727; jsp: 228; sed: 36
file content (4680 lines) | stat: -rw-r--r-- 195,569 bytes
parent folder | download | duplicates (3)
// Copyright 2014 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#include <stddef.h>

#include <algorithm>
#include <string>
#include <tuple>
#include <variant>
#include <vector>

#include "base/feature_list.h"
#include "base/files/file_enumerator.h"
#include "base/files/file_util.h"
#include "base/functional/bind.h"
#include "base/hash/hash.h"
#include "base/logging.h"
#include "base/memory/raw_ptr.h"
#include "base/path_service.h"
#include "base/run_loop.h"
#include "base/strings/string_number_conversions.h"
#include "base/strings/stringprintf.h"
#include "base/strings/utf_string_conversions.h"
#include "base/synchronization/lock.h"
#include "base/task/single_thread_task_runner.h"
#include "base/test/bind.h"
#include "base/test/metrics/histogram_tester.h"
#include "base/test/metrics/user_action_tester.h"
#include "base/test/scoped_feature_list.h"
#include "base/test/test_timeouts.h"
#include "base/test/with_feature_override.h"
#include "base/thread_annotations.h"
#include "base/threading/thread_restrictions.h"
#include "base/unguessable_token.h"
#include "build/branding_buildflags.h"
#include "build/build_config.h"
#include "cc/input/scroll_utils.h"
#include "chrome/browser/download/download_prefs.h"
#include "chrome/browser/pdf/pdf_extension_test_base.h"
#include "chrome/browser/pdf/pdf_extension_test_util.h"
#include "chrome/browser/pdf/pdf_viewer_stream_manager.h"
#include "chrome/browser/pdf/test_pdf_viewer_stream_manager.h"
#include "chrome/browser/plugins/plugin_test_utils.h"
#include "chrome/browser/profiles/profile.h"
#include "chrome/browser/renderer_context_menu/render_view_context_menu_browsertest_util.h"
#include "chrome/browser/ui/browser.h"
#include "chrome/browser/ui/browser_commands.h"
#include "chrome/browser/ui/browser_finder.h"
#include "chrome/browser/ui/tabs/tab_enums.h"
#include "chrome/browser/ui/tabs/tab_strip_model.h"
#include "chrome/browser/ui/views/frame/browser_view.h"
#include "chrome/browser/ui/zoom/chrome_zoom_level_prefs.h"
#include "chrome/common/chrome_features.h"
#include "chrome/common/chrome_paths.h"
#include "chrome/common/pref_names.h"
#include "chrome/common/webui_url_constants.h"
#include "chrome/test/base/ui_test_utils.h"
#include "components/download/public/common/download_item.h"
#include "components/guest_view/browser/test_guest_view_manager.h"
#include "components/metrics/content/subprocess_metrics_provider.h"
#include "components/pdf/browser/pdf_frame_util.h"
#include "components/pdf/common/constants.h"
#include "components/pdf/common/pdf_util.h"
#include "components/policy/core/browser/browser_policy_connector.h"
#include "components/policy/core/common/mock_configuration_policy_provider.h"
#include "components/policy/core/common/policy_map.h"
#include "components/policy/policy_constants.h"
#include "components/zoom/page_zoom.h"
#include "components/zoom/test/zoom_test_utils.h"
#include "components/zoom/zoom_controller.h"
#include "content/public/browser/browser_thread.h"
#include "content/public/browser/download_manager.h"
#include "content/public/browser/host_zoom_map.h"
#include "content/public/browser/navigation_controller.h"
#include "content/public/browser/navigation_entry.h"
#include "content/public/browser/plugin_service.h"
#include "content/public/browser/render_frame_host.h"
#include "content/public/browser/render_process_host.h"
#include "content/public/browser/render_widget_host.h"
#include "content/public/browser/render_widget_host_view.h"
#include "content/public/browser/site_isolation_policy.h"
#include "content/public/browser/web_contents.h"
#include "content/public/common/content_features.h"
#include "content/public/common/content_switches.h"
#include "content/public/common/url_constants.h"
#include "content/public/test/browser_test.h"
#include "content/public/test/browser_test_utils.h"
#include "content/public/test/context_menu_interceptor.h"
#include "content/public/test/fenced_frame_test_util.h"
#include "content/public/test/hit_test_region_observer.h"
#include "content/public/test/prerender_test_util.h"
#include "content/public/test/test_frame_navigation_observer.h"
#include "content/public/test/test_navigation_observer.h"
#include "content/public/test/text_input_test_utils.h"
#include "content/public/test/url_loader_interceptor.h"
#include "extensions/browser/api/file_system/file_system_api.h"
#include "extensions/browser/app_window/app_window.h"
#include "extensions/browser/app_window/app_window_registry.h"
#include "extensions/browser/extension_web_contents_observer.h"
#include "extensions/browser/guest_view/mime_handler_view/mime_handler_view_attach_helper.h"
#include "extensions/browser/guest_view/mime_handler_view/mime_handler_view_guest.h"
#include "extensions/browser/guest_view/mime_handler_view/test_mime_handler_view_guest.h"
#include "extensions/test/result_catcher.h"
#include "extensions/test/test_extension_dir.h"
#include "net/test/embedded_test_server/controllable_http_response.h"
#include "net/test/embedded_test_server/embedded_test_server.h"
#include "pdf/pdf_features.h"
#include "services/network/public/cpp/features.h"
#include "testing/gmock/include/gmock/gmock.h"
#include "testing/gtest/include/gtest/gtest.h"
#include "third_party/blink/public/common/context_menu_data/untrustworthy_context_menu_params.h"
#include "third_party/blink/public/common/input/web_input_event.h"
#include "third_party/blink/public/common/input/web_mouse_event.h"
#include "third_party/blink/public/common/messaging/transferable_message.h"
#include "third_party/blink/public/common/page/page_zoom.h"
#include "ui/base/clipboard/clipboard.h"
#include "ui/base/clipboard/clipboard_monitor.h"
#include "ui/base/clipboard/clipboard_observer.h"
#include "ui/base/clipboard/test/test_clipboard.h"
#include "ui/gfx/geometry/point.h"
#include "ui/gfx/geometry/rect.h"
#include "ui/native_theme/features/native_theme_features.h"
#include "url/gurl.h"

#if defined(TOOLKIT_VIEWS) && !BUILDFLAG(IS_MAC)
#include "chrome/browser/ui/views/location_bar/zoom_bubble_view.h"
#endif

namespace {

using ::content::WebContents;
using ::extensions::MimeHandlerViewGuest;
using ::extensions::TestMimeHandlerViewGuest;
using ::guest_view::GuestViewManager;
using ::guest_view::TestGuestViewManager;
using ::guest_view::TestGuestViewManagerFactory;
using ::pdf_extension_test_util::ConvertPageCoordToScreenCoord;
using ::pdf_extension_test_util::GetPdfPluginFrames;
using ::pdf_extension_test_util::SetInputFocusOnPlugin;
using ::testing::IsEmpty;
using ::testing::StartsWith;

const int kNumberLoadTestParts = 10;

#if BUILDFLAG(IS_MAC)
const int kDefaultKeyModifier = blink::WebInputEvent::kMetaKey;
#else
const int kDefaultKeyModifier = blink::WebInputEvent::kControlKey;
#endif

// Javascript evaluation used to check if inner PDF frames can be accessed.
constexpr char kNestedWindowFramesUndefinedCheck[] =
    "window.frames[0][0] === undefined";

struct PDFExtensionLoadTestPassToString {
  std::string operator()(
      const ::testing::TestParamInfo<std::tuple<int, bool>>& i) const {
    return std::string(std::get<1>(i.param) ? "OOPIF_" : "GUESTVIEW_") +
           base::NumberToString(std::get<0>(i.param));
  }
};

struct PDFExtensionIsolatedContentTestPassToString {
  std::string operator()(
      const ::testing::TestParamInfo<std::tuple<bool, bool>>& i) const {
    return std::string(std::get<1>(i.param) ? "OOPIF_" : "GUESTVIEW_") +
           std::string(std::get<0>(i.param) ? "SITE_ISOLATED"
                                            : "SITE_UNISOLATED");
  }
};

// Calling PluginService::GetPlugins ensures that LoadPlugins is called
// internally. This is an asynchronous task and this method uses a run loop to
// wait for the loading task to complete.
void WaitForPluginServiceToLoad() {
  base::RunLoop run_loop;
  content::PluginService::GetPluginsCallback callback = base::BindOnce(
      [](base::RepeatingClosure quit,
         const std::vector<content::WebPluginInfo>& unused) { quit.Run(); },
      run_loop.QuitClosure());
  content::PluginService::GetInstance()->GetPlugins(std::move(callback));
  run_loop.Run();
}

}  // namespace

class PDFExtensionTest : public base::test::WithFeatureOverride,
                         public PDFExtensionTestBase {
 public:
  PDFExtensionTest()
      : base::test::WithFeatureOverride(chrome_pdf::features::kPdfOopif) {}

  bool UseOopif() const override { return GetParam(); }
};

using PDFExtensionTestWithoutOopifOverride = PDFExtensionTestBase;

class PDFExtensionTestWithPartialLoading : public PDFExtensionTest {
 protected:
  std::vector<base::test::FeatureRefAndParams> GetEnabledFeatures()
      const override {
    auto enabled = PDFExtensionTest::GetEnabledFeatures();
    enabled.push_back({chrome_pdf::features::kPdfIncrementalLoading, {}});
    enabled.push_back({chrome_pdf::features::kPdfPartialLoading, {}});
    return enabled;
  }
};

// Historically, https://crrev.com/352991 focused the PDF embed element when it
// was created. To preserve this behavior, make sure the extension frame has
// focus for a full page PDF viewer on creation.
IN_PROC_BROWSER_TEST_P(PDFExtensionTest, FullPagePdfHasFocus) {
  // Load test PDF, and verify the text area has focus.
  content::RenderFrameHost* extension_host =
      LoadPdfGetExtensionHost(embedded_test_server()->GetURL("/pdf/test.pdf"));

  ASSERT_EQ(GetActiveWebContents()->GetFocusedFrame(), extension_host);
}

// For GuestView PDF, this test verifies that when a PDF is loaded, the embedder
// WebContents' html consists of a single <embed> tag with appropriate
// properties. It also verifies that the guest WebContents finishes loading. For
// OOPIF PDF, this test verifies that extension frame finished loading. For
// both, the WebContents and the extension frame should have the correct URL for
// the PDF extension.
// TODO(wjmaclean): Are there any attributes we can/should test with respect to
// the extension's loaded html?
IN_PROC_BROWSER_TEST_P(PDFExtensionTest, PdfExtensionLoaded) {
  // Load test PDF.
  const GURL main_url(embedded_test_server()->GetURL("/pdf/test.pdf"));
  content::RenderFrameHost* extension_host = LoadPdfGetExtensionHost(main_url);
  ASSERT_TRUE(extension_host);
  auto* web_contents = GetActiveWebContents();
  auto* primary_main_frame = web_contents->GetPrimaryMainFrame();

  // Verify we loaded the extension.
  const GURL extension_url(
      "chrome-extension://mhjfbmdgcfjbbpaeojofohoefgiehjai/index.html");
  EXPECT_EQ(extension_url, extension_host->GetLastCommittedURL());
  EXPECT_EQ(main_url, primary_main_frame->GetLastCommittedURL());

  // Make sure the embedder has the correct html boilerplate. GuestView PDF
  // only, as OOPIF PDF hides the html using shadow DOM.
  if (!UseOopif()) {
    EXPECT_EQ(
        1, content::EvalJs(primary_main_frame, "document.body.children.length;")
               .ExtractInt());
    EXPECT_EQ("EMBED", content::EvalJs(primary_main_frame,
                                       "document.body.firstChild.tagName;")
                           .ExtractString());
    EXPECT_EQ(
        "application/pdf",
        content::EvalJs(primary_main_frame, "document.body.firstChild.type;")
            .ExtractString());
    EXPECT_EQ("about:blank", content::EvalJs(primary_main_frame,
                                             "document.body.firstChild.src;")
                                 .ExtractString());
    EXPECT_TRUE(
        content::EvalJs(primary_main_frame,
                        "document.body.firstChild.hasAttribute('internalid');")
            .ExtractBool());
  }
}

// The pdf extension's frame should not allow cross-origin navigations. They
// should be blocked, but not crash.
// https://crbug.com/394513280
IN_PROC_BROWSER_TEST_P(PDFExtensionTest,
                       NoCrossOriginNavigationFromPdfExtensionFrame) {
  if (UseOopif()) {
    // This test only applies to MimeHandlerViewGuest PDF.
    GTEST_SKIP();
  }

  const GURL main_url(embedded_test_server()->GetURL("/pdf/test.pdf"));
  content::RenderFrameHost* extension_host = LoadPdfGetExtensionHost(main_url);
  ASSERT_TRUE(extension_host);

  content::TestFrameNavigationObserver frame_nav_observer(extension_host);
  ASSERT_TRUE(content::ExecJs(extension_host,
                              "window.location = 'https://example.com';"));
  frame_nav_observer.Wait();

  EXPECT_EQ(net::ERR_BLOCKED_BY_CLIENT,
            frame_nav_observer.last_net_error_code());
  const GURL extension_url(
      "chrome-extension://mhjfbmdgcfjbbpaeojofohoefgiehjai/index.html");
  EXPECT_EQ(extension_url, extension_host->GetLastCommittedURL());
}

// A test to verify that the presence of a pending NavigationEntry on the
// NavigationController of a WebContents hosting a PDF does not affect the
// value returned by WebContentsImpl::GetPendingZoomLevel() when called on
// the PDF extension frame's RenderWidgetHost.
IN_PROC_BROWSER_TEST_P(PDFExtensionTest,
                       ZoomNotAffectedByPendingNavigationEntry) {
  // Set default zoom factor to 200%.
  auto* web_contents = GetActiveWebContents();
  content::HostZoomMap::GetForWebContents(web_contents)
      ->SetDefaultZoomLevel(blink::ZoomFactorToZoomLevel(2.0));

  // Load PDF.
  const GURL main_url(embedded_test_server()->GetURL("/pdf/test.pdf"));
  content::RenderFrameHost* extension_host = LoadPdfGetExtensionHost(main_url);
  ASSERT_TRUE(extension_host);

  // Verify PDF extension frame has zoom factor 100%.
  EXPECT_EQ(
      blink::ZoomFactorToZoomLevel(1.0),
      content::GetPendingZoomLevel(extension_host->GetRenderWidgetHost()));

  // Navigate and immediately check GetPendingZoomLevel stays at factor 100%.
  auto& controller = web_contents->GetController();
  controller.LoadURLWithParams(content::NavigationController::LoadURLParams(
      embedded_test_server()->GetURL("/title1.html")));
  EXPECT_EQ(
      blink::ZoomFactorToZoomLevel(1.0),
      content::GetPendingZoomLevel(extension_host->GetRenderWidgetHost()));
  // Verify the navigation is still pending. This gives assurance that the
  // preceding call to GetPendingZoomLevel did encounter the condition being
  // tested.
  EXPECT_NE(nullptr, controller.GetPendingEntry());
}

// Helper class to allow pausing the asynchronous attachment of an inner
// WebContents between MimeHandlerViewAttachHelper's AttachToOuterWebContents()
// and ResumeAttachOrDestroy().  This corresponds to the point where the inner
// WebContents has been created but not yet attached or navigated.
class InnerWebContentsAttachDelayer {
 public:
  explicit InnerWebContentsAttachDelayer(
      content::RenderFrameHost* outer_frame) {
    auto* mime_handler_view_helper =
        extensions::MimeHandlerViewAttachHelper::Get(
            outer_frame->GetProcess()->GetDeprecatedID());
    mime_handler_view_helper->set_resume_attach_callback_for_testing(
        base::BindOnce(&InnerWebContentsAttachDelayer::ResumeAttachCallback,
                       base::Unretained(this)));
  }

  void ResumeAttachCallback(base::OnceClosure resume_closure) {
    // Called to continue in the test while the attachment is paused. The
    // attachment will continue when the test calls ResumeAttach.
    resume_closure_ = std::move(resume_closure);
    run_loop_.Quit();
  }

  void WaitForAttachStart() { run_loop_.Run(); }

  void ResumeAttach() {
    ASSERT_TRUE(resume_closure_);
    std::move(resume_closure_).Run();
  }

 private:
  base::OnceClosure resume_closure_;
  base::RunLoop run_loop_;
};

// Ensure that when the only other PDF instance closes in the middle of
// attaching an inner WebContents for a PDF, the inner WebContents can still
// successfully complete its attachment and subsequent navigation.  See
// https://crbug.com/1295431.
// See PDFExtensionOopifTest.PdfExtensionLoadedWhileOldPdfCloses for the OOPIF
// PDF version.
IN_PROC_BROWSER_TEST_F(PDFExtensionTestWithoutOopifOverride,
                       PdfExtensionLoadedWhileOldPdfCloses) {
  // Load test PDF in first tab.
  const GURL main_url(embedded_test_server()->GetURL("/pdf/test.pdf"));
  ASSERT_TRUE(ui_test_utils::NavigateToURL(browser(), main_url));
  auto* primary_main_frame = GetActiveWebContents()->GetPrimaryMainFrame();

  // Verify the PDF has loaded.
  auto* guest_view = GetGuestViewManager()->WaitForSingleGuestViewCreated();
  ASSERT_TRUE(guest_view);
  EXPECT_NE(primary_main_frame, guest_view->GetGuestMainFrame());
  TestMimeHandlerViewGuest::WaitForGuestLoadStartThenStop(guest_view);

  // Verify we loaded the extension.
  const GURL extension_url(
      "chrome-extension://mhjfbmdgcfjbbpaeojofohoefgiehjai/index.html");
  EXPECT_EQ(extension_url,
            guest_view->GetGuestMainFrame()->GetLastCommittedURL());
  EXPECT_EQ(main_url, primary_main_frame->GetLastCommittedURL());

  // Open another tab and navigate it to a same-site non-PDF URL.
  ui_test_utils::TabAddedWaiter add_tab1(browser());
  chrome::NewTab(browser());
  add_tab1.Wait();
  ASSERT_EQ(2, browser()->tab_strip_model()->count());
  WebContents* new_web_contents =
      browser()->tab_strip_model()->GetWebContentsAt(1);
  ASSERT_EQ(new_web_contents, GetActiveWebContents());
  const GURL non_pdf_url(embedded_test_server()->GetURL("/title1.html"));
  ASSERT_TRUE(ui_test_utils::NavigateToURL(browser(), non_pdf_url));

  // Start loading another PDF in the new tab, but pause during guest attach.
  // It is important that the PDF navigation uses the same RFH as `delayer`.
  InnerWebContentsAttachDelayer delayer(
      new_web_contents->GetPrimaryMainFrame());
  content::TestNavigationObserver navigation_observer(new_web_contents);
  new_web_contents->GetController().LoadURLWithParams(
      content::NavigationController::LoadURLParams(main_url));
  delayer.WaitForAttachStart();

  // Close the first tab, destroying the first PDF while the second PDF is in
  // the middle of initialization. In https://crbug.com/1295431, the extension
  // process exited here and caused a crash when the second PDF resumed.
  EXPECT_EQ(2U, GetGuestViewManager()->GetCurrentGuestCount());
  ASSERT_EQ(2, browser()->tab_strip_model()->count());
  browser()->tab_strip_model()->CloseWebContentsAt(
      0, TabCloseTypes::CLOSE_USER_GESTURE);
  ASSERT_EQ(1, browser()->tab_strip_model()->count());
  // `TestGuestViewManager` manages the guests by the order of creation.
  GetGuestViewManager()->WaitForFirstGuestDeleted();
  EXPECT_EQ(1U, GetGuestViewManager()->GetCurrentGuestCount());
  primary_main_frame = new_web_contents->GetPrimaryMainFrame();

  // Now resume the guest attachment and ensure the second PDF loads without
  // crashing.
  delayer.ResumeAttach();
  navigation_observer.Wait();
  auto* guest_view2 = GetGuestViewManager()->WaitForSingleGuestViewCreated();
  ASSERT_TRUE(guest_view2);
  EXPECT_NE(primary_main_frame, guest_view2->GetGuestMainFrame());
  TestMimeHandlerViewGuest::WaitForGuestLoadStartThenStop(guest_view2);

  // Verify we loaded the extension.
  EXPECT_EQ(extension_url,
            guest_view2->GetGuestMainFrame()->GetLastCommittedURL());
  EXPECT_EQ(main_url, primary_main_frame->GetLastCommittedURL());
}

// This test verifies that when a PDF is served with a restrictive
// Content-Security-Policy, the embed tag is still sized correctly.
// Regression test for https://crbug.com/271452.
IN_PROC_BROWSER_TEST_P(PDFExtensionTest, CSPDoesNotBlockEmbedStyles) {
  const GURL main_url(embedded_test_server()->GetURL("/pdf/test-csp.pdf"));
  content::RenderFrameHost* extension_host = LoadPdfGetExtensionHost(main_url);
  ASSERT_TRUE(extension_host);
  auto* primary_main_frame = GetActiveWebContents()->GetPrimaryMainFrame();

  // Verify the extension was loaded.
  const GURL extension_url(
      "chrome-extension://mhjfbmdgcfjbbpaeojofohoefgiehjai/index.html");
  EXPECT_EQ(extension_url, extension_host->GetLastCommittedURL());
  EXPECT_EQ(main_url, primary_main_frame->GetLastCommittedURL());

  // Verify that the plugin occupies all of the page area.
  const gfx::Rect embedder_rect =
      primary_main_frame->GetView()->GetViewBounds();
  const gfx::Rect extension_rect = extension_host->GetView()->GetViewBounds();
  EXPECT_EQ(embedder_rect, extension_rect);
}

// This test verifies that when a PDF is served with
// Content-Security-Policy: sandbox, this is ignored and the PDF is displayed.
// Regression test for https://crbug.com/1187122.
IN_PROC_BROWSER_TEST_P(PDFExtensionTest, CSPWithSandboxDoesNotBlockPDF) {
  const GURL main_url(
      embedded_test_server()->GetURL("/pdf/test-csp-sandbox.pdf"));
  content::RenderFrameHost* extension_host = LoadPdfGetExtensionHost(main_url);
  ASSERT_TRUE(extension_host);

  // Verify the extension was loaded.
  const GURL extension_url(
      "chrome-extension://mhjfbmdgcfjbbpaeojofohoefgiehjai/index.html");
  EXPECT_EQ(extension_url, extension_host->GetLastCommittedURL());
  EXPECT_EQ(
      main_url,
      GetActiveWebContents()->GetPrimaryMainFrame()->GetLastCommittedURL());
}

// This test verifies that Content-Security-Policy's frame-ancestors 'none'
// directive is effective on a PDF response.
// Regression test for https://crbug.com/1107535.
IN_PROC_BROWSER_TEST_P(PDFExtensionTest, CSPFrameAncestorsCanBlockEmbedding) {
  WebContents* web_contents = GetActiveWebContents();
  content::WebContentsConsoleObserver console_observer(web_contents);
  console_observer.SetPattern(
      "*because an ancestor violates the following Content Security Policy "
      "directive: \"frame-ancestors 'none'*");

  ASSERT_TRUE(ui_test_utils::NavigateToURL(
      browser(), embedded_test_server()->GetURL(
                     "/pdf/frame-test-csp-frame-ancestors-none.html")));

  ASSERT_TRUE(console_observer.Wait());

  EXPECT_EQ(0, CountPDFProcesses());
}

// This test verifies that Content-Security-Policy's frame-ancestors directive
// overrides an X-Frame-Options header on a PDF response.
// Regression test for https://crbug.com/1107535.
IN_PROC_BROWSER_TEST_P(PDFExtensionTest,
                       CSPFrameAncestorsOverridesXFrameOptions) {
  const GURL main_url(
      embedded_test_server()->GetURL("/pdf/frame-test-csp-and-xfo.html"));

  content::RenderFrameHost* extension_host;
  if (UseOopif()) {
    extension_host = LoadPdfInFirstChildGetExtensionHost(main_url);
  } else {
    // The URL uses an iframe element to embed the PDF, so
    // `LoadPdfInFirstChild()` can't be used here.
    ASSERT_TRUE(ui_test_utils::NavigateToURL(browser(), main_url));

    // Verify the pdf has loaded.
    auto* guest_view = GetGuestViewManager()->WaitForSingleGuestViewCreated();
    ASSERT_TRUE(guest_view);
    TestMimeHandlerViewGuest::WaitForGuestLoadStartThenStop(guest_view);
    extension_host = guest_view->GetGuestMainFrame();
  }
  ASSERT_TRUE(extension_host);

  auto* primary_main_frame = GetActiveWebContents()->GetPrimaryMainFrame();
  EXPECT_NE(primary_main_frame, extension_host);

  // Verify the extension was loaded.
  const GURL extension_url(
      "chrome-extension://mhjfbmdgcfjbbpaeojofohoefgiehjai/index.html");
  EXPECT_EQ(extension_url, extension_host->GetLastCommittedURL());
  EXPECT_EQ(
      main_url,
      GetActiveWebContents()->GetPrimaryMainFrame()->GetLastCommittedURL());
}

class PDFExtensionLoadTest
    : public PDFExtensionTestWithoutOopifOverride,
      public testing::WithParamInterface<std::tuple<int, bool>> {
 protected:
  int load_test_part() const { return std::get<0>(GetParam()); }

  bool UseOopif() const override { return std::get<1>(GetParam()); }

  // Load all the PDFs contained in chrome/test/data/<dir_name>. The files are
  // sharded across kNumberLoadTestParts using base::PersistentHash(filename).
  void LoadAllPdfsTest(const std::string& dir_name) {
    base::ScopedAllowBlockingForTesting allow_blocking;
    base::FilePath test_data_dir;
    ASSERT_TRUE(base::PathService::Get(chrome::DIR_TEST_DATA, &test_data_dir));
    base::FileEnumerator file_enumerator(test_data_dir.AppendASCII(dir_name),
                                         false, base::FileEnumerator::FILES,
                                         FILE_PATH_LITERAL("*.pdf"));

    size_t count = 0;
    for (base::FilePath file_path = file_enumerator.Next(); !file_path.empty();
         file_path = file_enumerator.Next()) {
      std::string filename = file_path.BaseName().MaybeAsASCII();
      ASSERT_FALSE(filename.empty());

      std::string pdf_file = dir_name + "/" + filename;
      SCOPED_TRACE(pdf_file);
      if (base::PersistentHash(filename) % kNumberLoadTestParts ==
          load_test_part()) {
        LOG(INFO) << "Loading: " << pdf_file;
        testing::AssertionResult success =
            LoadPdf(embedded_test_server()->GetURL("/" + pdf_file));
        if (pdf_file == "pdf_private/cfuzz5.pdf")
          continue;
        EXPECT_EQ(PdfIsExpectedToLoad(pdf_file), success) << pdf_file;
      }
      ++count;
    }
    // Assume that there is at least 1 pdf in the directory to guard against
    // someone deleting the directory and silently making the test pass.
    ASSERT_GE(count, 1u);
  }
};

#if BUILDFLAG(IS_LINUX)
#define MAYBE_Load DISABLED_Load
#else
#define MAYBE_Load Load
#endif
IN_PROC_BROWSER_TEST_P(PDFExtensionLoadTest, MAYBE_Load) {
  LoadAllPdfsTest("pdf");
}

#if BUILDFLAG(GOOGLE_CHROME_BRANDING)
IN_PROC_BROWSER_TEST_P(PDFExtensionLoadTest, LoadPrivate) {
  LoadAllPdfsTest("pdf_private");
}
#endif

// We break PDFExtensionLoadTest up into kNumberLoadTestParts.
INSTANTIATE_TEST_SUITE_P(
    PDFTestFiles,
    PDFExtensionLoadTest,
    testing::Combine(testing::Range(0, kNumberLoadTestParts), testing::Bool()),
    PDFExtensionLoadTestPassToString());

using PDFExtensionBlobNavigationTest = PDFExtensionTest;

IN_PROC_BROWSER_TEST_P(PDFExtensionBlobNavigationTest, NewTab) {
  ASSERT_TRUE(ui_test_utils::NavigateToURL(
      browser(),
      embedded_test_server()->GetURL("/pdf/blob_navigation_new_tab.html")));

  // Calling `window.open` without a user gesture will be blocked by the popup
  // blocker. `ExecJs()` emulates a user gesture which bypasses the restriction.
  content::TestNavigationObserver navigation_observer(nullptr);
  navigation_observer.StartWatchingNewWebContents();
  ASSERT_TRUE(content::ExecJs(GetActiveWebContents(), "openBlobPdfInNewTab()"));
  navigation_observer.Wait();

  ASSERT_EQ(browser()->tab_strip_model()->count(), 2);
  WebContents* new_tab_contents =
      browser()->tab_strip_model()->GetWebContentsAt(1);
  EXPECT_TRUE(EnsureFullPagePDFHasLoadedWithValidFrameTree(
      new_tab_contents, /*allow_multiple_frames=*/false));
}

IN_PROC_BROWSER_TEST_P(PDFExtensionBlobNavigationTest,
                       NewTabWithCrossOriginEmbedderPolicy) {
  ASSERT_TRUE(ui_test_utils::NavigateToURL(
      browser(), embedded_test_server()->GetURL(
                     "/pdf/test-coep-blob-navigation-new-tab.html")));

  content::TestNavigationObserver navigation_observer(nullptr);
  navigation_observer.StartWatchingNewWebContents();
  ASSERT_TRUE(content::ExecJs(GetActiveWebContents(), "openBlobPdfInNewTab()"));
  navigation_observer.Wait();

  ASSERT_EQ(browser()->tab_strip_model()->count(), 2);
  EXPECT_TRUE(EnsureFullPagePDFHasLoadedWithValidFrameTree(
      browser()->tab_strip_model()->GetWebContentsAt(1),
      /*allow_multiple_frames=*/false));
}

IN_PROC_BROWSER_TEST_P(PDFExtensionBlobNavigationTest, SameTab) {
  ASSERT_TRUE(ui_test_utils::NavigateToURLBlockUntilNavigationsComplete(
      browser(),
      embedded_test_server()->GetURL("/pdf/blob_navigation_same_tab.html"),
      /*number_of_navigations=*/2));
  EXPECT_TRUE(EnsureFullPagePDFHasLoadedWithValidFrameTree(
      GetActiveWebContents(), /*allow_multiple_frames=*/false));
}

IN_PROC_BROWSER_TEST_P(PDFExtensionTest, LoadInPlatformApp) {
  // TODO(crbug.com/40268279): Remove this once the test passes for OOPIF PDF.
  if (UseOopif()) {
    GTEST_SKIP();
  }

  extensions::TestExtensionDir dir;
  dir.WriteManifest(R"(
    {
      "name": "PDFExtensionTest App",
      "version": "1.0",
      "manifest_version": 2,
      "app": {
        "background": {
          "scripts": ["background_script.js"]
        }
      }
    }
  )");

  dir.WriteFile(FILE_PATH_LITERAL("background_script.js"), R"(
    chrome.app.runtime.onLaunched.addListener(() => {
      chrome.app.window.create('test.pdf', () => {
        chrome.test.notifyPass();
      });
    });
  )");

  {
    base::ScopedAllowBlockingForTesting allow_blocking;
    std::string pdf_contents;
    ASSERT_TRUE(base::ReadFileToString(
        GetTestResourcesParentDir().AppendASCII("pdf").AppendASCII("test.pdf"),
        &pdf_contents));
    dir.WriteFile(FILE_PATH_LITERAL("test.pdf"), pdf_contents);
  }

  extensions::ResultCatcher result_catcher;
  ASSERT_TRUE(LoadAndLaunchApp(dir.UnpackedPath(), /*uses_guest_view=*/true));
  ASSERT_TRUE(result_catcher.GetNextResult()) << result_catcher.message();

  auto* app_registry = extensions::AppWindowRegistry::Get(browser()->profile());
  ASSERT_TRUE(app_registry);
  const extensions::AppWindowRegistry::AppWindowList& app_windows =
      app_registry->app_windows();
  ASSERT_EQ(app_windows.size(), 1u);
  extensions::AppWindow* window = app_windows.front();
  ASSERT_TRUE(window);
  content::WebContents* app_contents = window->web_contents();

  ASSERT_TRUE(content::WaitForLoadStop(app_contents));
  EXPECT_TRUE(pdf_extension_test_util::EnsurePDFHasLoaded(app_contents));
}

class DownloadAwaiter : public content::DownloadManager::Observer {
 public:
  DownloadAwaiter() = default;
  ~DownloadAwaiter() override = default;

  const GURL& GetLastUrl() {
    // Wait until the download has been created.
    download_run_loop_.Run();
    return last_url_;
  }

  // content::DownloadManager::Observer implementation.
  void OnDownloadCreated(content::DownloadManager* manager,
                         download::DownloadItem* item) override {
    last_url_ = item->GetURL();
    download_run_loop_.Quit();
  }

 private:
  base::RunLoop download_run_loop_;
  GURL last_url_;
};

// Tests behavior when the PDF plugin is disabled in preferences.
class PDFPluginDisabledTest : public PDFExtensionTest {
 protected:
  void SetUpCommandLine(base::CommandLine* command_line) override {
    PDFExtensionTest::SetUpCommandLine(command_line);

    command_line->AppendSwitch(switches::kEnablePluginPlaceholderTesting);
  }

  void SetUpOnMainThread() override {
    PDFExtensionTest::SetUpOnMainThread();

    content::BrowserContext* browser_context =
        GetActiveWebContents()->GetBrowserContext();
    Profile* profile = Profile::FromBrowserContext(browser_context);
    profile->GetPrefs()->SetBoolean(prefs::kPluginsAlwaysOpenPdfExternally,
                                    true);

    content::DownloadManager* download_manager =
        browser_context->GetDownloadManager();
    download_awaiter_ = std::make_unique<DownloadAwaiter>();
    download_manager->AddObserver(download_awaiter_.get());
  }

  void TearDownOnMainThread() override {
    content::BrowserContext* browser_context =
        GetActiveWebContents()->GetBrowserContext();
    content::DownloadManager* download_manager =
        browser_context->GetDownloadManager();
    download_manager->RemoveObserver(download_awaiter_.get());

    // Cancel all downloads to shut down cleanly.
    std::vector<raw_ptr<download::DownloadItem, VectorExperimental>> downloads;
    download_manager->GetAllDownloads(&downloads);
    for (download::DownloadItem* item : downloads) {
      item->Cancel(false);
    }

    PDFExtensionTest::TearDownOnMainThread();
  }

  void ClickOpenButtonInIframe() {
    content::RenderFrameHost* iframe_render_frame_host =
        ChildFrameAt(GetActiveWebContents(), 0);
    ASSERT_TRUE(iframe_render_frame_host);
    ASSERT_TRUE(
        content::ExecJs(iframe_render_frame_host,
                        "document.getElementById('open-button').click();"));
  }

  void ValidateSingleSuccessfulDownloadAndNoPDFPluginLaunch() {
    // Validate that we downloaded a single PDF and didn't launch the PDF
    // plugin.
    EXPECT_EQ(embedded_test_server()->GetURL("/pdf/test.pdf"),
              AwaitAndGetLastDownloadedUrl());
    EXPECT_EQ(1u, GetNumberOfDownloads());
    EXPECT_EQ(0, CountPDFProcesses());
  }

 private:
  size_t GetNumberOfDownloads() {
    content::BrowserContext* browser_context =
        GetActiveWebContents()->GetBrowserContext();
    content::DownloadManager* download_manager =
        browser_context->GetDownloadManager();

    std::vector<raw_ptr<download::DownloadItem, VectorExperimental>> downloads;
    download_manager->GetAllDownloads(&downloads);
    return downloads.size();
  }

  const GURL& AwaitAndGetLastDownloadedUrl() {
    return download_awaiter_->GetLastUrl();
  }

  std::unique_ptr<DownloadAwaiter> download_awaiter_;
};

IN_PROC_BROWSER_TEST_P(PDFPluginDisabledTest, DirectNavigationToPDF) {
  // Navigate to a PDF and test that it is downloaded.
  ASSERT_TRUE(ui_test_utils::NavigateToURL(
      browser(), embedded_test_server()->GetURL("/pdf/test.pdf")));

  ValidateSingleSuccessfulDownloadAndNoPDFPluginLaunch();
}

// TODO(crbug.com/40762344): fix flakiness and reenable. Also, that test
// became flaky on Windows, see crbug.com/1323701.
#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS) || BUILDFLAG(IS_MAC) || \
    BUILDFLAG(IS_WIN)
#define MAYBE_EmbedPdfPlaceholderWithCSP DISABLED_EmbedPdfPlaceholderWithCSP
#else
#define MAYBE_EmbedPdfPlaceholderWithCSP EmbedPdfPlaceholderWithCSP
#endif  // BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS) || BUILDFLAG(IS_MAC) ||
        // BUILDFLAG(IS_WIN)
IN_PROC_BROWSER_TEST_P(PDFPluginDisabledTest,
                       MAYBE_EmbedPdfPlaceholderWithCSP) {
  // Navigate to a page with CSP that uses <embed> to embed a PDF as a plugin.
  ASSERT_TRUE(ui_test_utils::NavigateToURL(
      browser(), embedded_test_server()->GetURL("/pdf/pdf_embed_csp.html")));
  PluginTestUtils::WaitForPlaceholderReady(GetActiveWebContents(), "pdf_embed");

  // Fake a click on the <embed>, then press Enter to trigger the download.
  gfx::Point point_in_pdf(100, 100);
  content::SimulateMouseClickAt(GetActiveWebContents(), kDefaultKeyModifier,
                                blink::WebMouseEvent::Button::kLeft,
                                point_in_pdf);
  content::SimulateKeyPress(GetActiveWebContents(), ui::DomKey::ENTER,
                            ui::DomCode::ENTER, ui::VKEY_RETURN, false, false,
                            false, false);

  ValidateSingleSuccessfulDownloadAndNoPDFPluginLaunch();
}

#if BUILDFLAG(IS_CHROMEOS)
// TODO(crbug.com/40923384): Deflake and reenable the test.
#define MAYBE_IframePdfPlaceholderWithCSP DISABLED_IframePdfPlaceholderWithCSP
#else
#define MAYBE_IframePdfPlaceholderWithCSP IframePdfPlaceholderWithCSP
#endif
IN_PROC_BROWSER_TEST_P(PDFPluginDisabledTest,
                       MAYBE_IframePdfPlaceholderWithCSP) {
  // Navigate to a page that uses <iframe> to embed a PDF as a plugin.
  ASSERT_TRUE(ui_test_utils::NavigateToURL(
      browser(), embedded_test_server()->GetURL("/pdf/pdf_iframe_csp.html")));

  ClickOpenButtonInIframe();
  ValidateSingleSuccessfulDownloadAndNoPDFPluginLaunch();
}

IN_PROC_BROWSER_TEST_P(PDFPluginDisabledTest,
                       IframePlaceholderInjectedIntoNewWindow) {
  // This is an unusual test to verify crbug.com/924823. We are injecting the
  // HTML for a PDF IFRAME into a newly created popup with an undefined URL.
  ASSERT_TRUE(
      content::EvalJs(
          GetActiveWebContents(),
          content::JsReplace(
              "new Promise((resolve) => {"
              "  var popup = window.open();"
              "  popup.document.writeln("
              "      '<iframe id=\"pdf_iframe\" src=\"' + $1 + '\"></iframe>');"
              "  var iframe = popup.document.getElementById('pdf_iframe');"
              "  iframe.onload = () => resolve(true);"
              "});",
              embedded_test_server()->GetURL("/pdf/test.pdf").spec()))
          .ExtractBool());

  ClickOpenButtonInIframe();
  ValidateSingleSuccessfulDownloadAndNoPDFPluginLaunch();
}

// Test that if the plugin tries to load a URL that redirects then it will fail
// to load. This is to avoid the source origin of the document changing during
// the redirect, which can have security implications. https://crbug.com/653749.
//
// Note that this can happen only during partial loading, as the initial URL
// load is handled by MimeHandlerView, and the plugin only gets the response.
IN_PROC_BROWSER_TEST_P(PDFExtensionTestWithPartialLoading,
                       PartialRedirectsFailInPlugin) {
  // Should match values used by `chrome_pdf::DocumentLoaderImpl`.
  constexpr size_t kDefaultRequestSize = 65536;
  constexpr size_t kChunkCloseDistance = 10;

  std::string pdf_contents;
  {
    base::ScopedAllowBlockingForTesting allow_blocking;
    base::FilePath test_data_dir;
    ASSERT_TRUE(base::PathService::Get(chrome::DIR_TEST_DATA, &test_data_dir));
    ASSERT_TRUE(
        base::ReadFileToString(test_data_dir.AppendASCII("pdf").AppendASCII(
                                   "test-ranges-linearized.pdf"),
                               &pdf_contents));
  }
  ASSERT_GT(pdf_contents.size(),
            kDefaultRequestSize * (kChunkCloseDistance + 2));

  // Use an additional test server, to allow customizing the response handling.
  net::test_server::EmbeddedTestServer test_server;

  constexpr char kActualPdf[] = "/pdf/test-ranges-linearized.pdf";
  constexpr char kSimulatedPdf[] = "/simulated/test-ranges-linearized.pdf";
  net::test_server::ControllableHttpResponse initial_response(&test_server,
                                                              kSimulatedPdf);
  net::test_server::ControllableHttpResponse followup_response(&test_server,
                                                               kSimulatedPdf);
  auto handle = test_server.StartAndReturnHandle();

  WebContents* contents = GetActiveWebContents();
  content::TestNavigationObserver navigation_observer(contents);
  contents->GetController().LoadURLWithParams(
      content::NavigationController::LoadURLParams(
          test_server.GetURL(kSimulatedPdf)));

  {
    SCOPED_TRACE("Waiting for initial request");
    initial_response.WaitForRequest();
  }
  initial_response.Send("HTTP/1.1 200 OK\r\n");
  initial_response.Send("Accept-Ranges: bytes\r\n");
  initial_response.Send(
      base::StringPrintf("Content-Length: %zu\r\n", pdf_contents.size()));
  initial_response.Send("Content-Type: application/pdf\r\n");
  initial_response.Send("\r\n");
  initial_response.Send(pdf_contents.substr(0, kDefaultRequestSize));

  navigation_observer.Wait();
  ASSERT_TRUE(navigation_observer.last_navigation_succeeded());

  {
    SCOPED_TRACE("Waiting for follow-up request");
    followup_response.WaitForRequest();
  }
  followup_response.Send("HTTP/1.1 301 Moved Permanently\r\n");
  followup_response.Send(base::StringPrintf(
      "Location: %s\r\n",
      embedded_test_server()->GetURL(kActualPdf).spec().c_str()));
  followup_response.Send("\r\n");
  followup_response.Done();

  // TODO(crbug.com/40189769): Load success or failure is non-deterministic
  // currently, due to races between viewport messages and loading. For this
  // test, we only care that loading terminated, not about success or failure.
  std::ignore = pdf_extension_test_util::EnsurePDFHasLoaded(contents);
}

// Ensure that the internal PDF plugin application/x-google-chrome-pdf won't be
// loaded if it's not loaded in the chrome extension page.
IN_PROC_BROWSER_TEST_P(PDFExtensionTest, EnsureInternalPluginDisabled) {
  std::string url = embedded_test_server()->GetURL("/pdf/test.pdf").spec();
  std::string data_url =
      "data:text/html,"
      "<html><body>"
      "<embed type=\"application/x-google-chrome-pdf\" src=\"" +
      url +
      "\">"
      "</body></html>";
  ASSERT_TRUE(ui_test_utils::NavigateToURL(browser(), GURL(data_url)));
  WebContents* web_contents = GetActiveWebContents();
  ASSERT_EQ(false,
            content::EvalJs(
                web_contents,
                "var plugin_loaded = "
                "    document.getElementsByTagName('embed')[0].postMessage !== "
                "undefined;"
                "plugin_loaded;"));
}

// Ensure cross-origin replies won't work for getSelectedText.
IN_PROC_BROWSER_TEST_P(PDFExtensionTest, EnsureCrossOriginRepliesBlocked) {
  std::string url = embedded_test_server()->GetURL("/pdf/test.pdf").spec();
  std::string data_url =
      "data:text/html,"
      "<html><body>"
      "<embed type=\"application/pdf\" src=\"" +
      url +
      "\">"
      "</body></html>";

  content::RenderFrameHost* extension_host =
      LoadPdfInFirstChildGetExtensionHost(GURL(data_url));
  ASSERT_TRUE(extension_host);

  TestGetSelectedTextReply(extension_host, false);
}

// Ensure same-origin replies do work for getSelectedText.
// The full page PDF embedder frame can't post messages to the PDF extension
// frame, so it can't post a getSelectedText message.
IN_PROC_BROWSER_TEST_F(PDFExtensionTestWithoutOopifOverride,
                       EnsureSameOriginRepliesAllowed) {
  content::RenderFrameHost* extension_host =
      LoadPdfGetExtensionHost(embedded_test_server()->GetURL("/pdf/test.pdf"));
  ASSERT_TRUE(extension_host);

  TestGetSelectedTextReply(extension_host, true);
}

// TODO(crbug.com/40647731): Should be allowed?
IN_PROC_BROWSER_TEST_P(PDFExtensionTest, EnsureOpaqueOriginRepliesBlocked) {
  content::RenderFrameHost* extension_host =
      LoadPdfInFirstChildGetExtensionHost(
          embedded_test_server()->GetURL("/pdf/data_url_rectangles.html"));
  ASSERT_TRUE(extension_host);

  TestGetSelectedTextReply(extension_host, false);
}

// Ensure that the PDF component extension cannot be loaded directly.
IN_PROC_BROWSER_TEST_P(PDFExtensionTest, BlockDirectAccess) {
  const std::string pattern =
      UseOopif()
          ? "*Failed to get StreamContainer*"
          : "*Streams are only available from a mime handler view guest.*";

  WebContents* web_contents = GetActiveWebContents();

  content::WebContentsConsoleObserver console_observer(web_contents);
  console_observer.SetPattern(pattern);
  GURL forbidden_url(
      "chrome-extension://mhjfbmdgcfjbbpaeojofohoefgiehjai/index.html?"
      "https://example.com/notrequested.pdf");
  ASSERT_TRUE(ui_test_utils::NavigateToURL(browser(), forbidden_url));

  ASSERT_TRUE(console_observer.Wait());

  EXPECT_EQ(0, CountPDFProcesses());
}

// This test ensures that PDF can be loaded from local file
IN_PROC_BROWSER_TEST_P(PDFExtensionTest, EnsurePDFFromLocalFileLoads) {
  GURL test_pdf_url;
  {
    base::ScopedAllowBlockingForTesting allow_blocking;
    base::FilePath test_data_dir;
    ASSERT_TRUE(base::PathService::Get(chrome::DIR_TEST_DATA, &test_data_dir));
    test_data_dir = test_data_dir.Append(FILE_PATH_LITERAL("pdf"));
    base::FilePath test_data_file = test_data_dir.AppendASCII("test.pdf");
    ASSERT_TRUE(PathExists(test_data_file));
    test_pdf_url = GURL("file://" + test_data_file.MaybeAsASCII());
  }
  EXPECT_TRUE(LoadPdf(test_pdf_url));

  EXPECT_EQ(1, CountPDFProcesses());
}

// Tests that PDF with no filename extension can be loaded from local file.
IN_PROC_BROWSER_TEST_P(PDFExtensionTest, ExtensionlessPDFLocalFileLoads) {
  GURL test_pdf_url;
  {
    base::ScopedAllowBlockingForTesting allow_blocking;
    base::FilePath test_data_dir;
    ASSERT_TRUE(base::PathService::Get(chrome::DIR_TEST_DATA, &test_data_dir));
    test_data_dir = test_data_dir.AppendASCII("pdf");
    base::FilePath test_data_file = test_data_dir.AppendASCII("imgpdf");
    ASSERT_TRUE(PathExists(test_data_file));
    test_pdf_url = GURL("file://" + test_data_file.MaybeAsASCII());
  }
  EXPECT_TRUE(LoadPdf(test_pdf_url));

  EXPECT_EQ(1, CountPDFProcesses());
}

// This test ensures that link permissions are enforced properly in PDFs.
IN_PROC_BROWSER_TEST_P(PDFExtensionTest, LinkPermissions) {
  content::RenderFrameHost* extension_host =
      LoadPdfGetExtensionHost(embedded_test_server()->GetURL("/pdf/test.pdf"));
  ASSERT_TRUE(extension_host);

  // chrome://favicon links should be allowed for PDFs, while chrome://settings
  // links should not.
  GURL valid_link_url(std::string(chrome::kChromeUIFaviconURL) +
                      "https://www.google.ca/");
  GURL invalid_link_url(chrome::kChromeUISettingsURL);

  GURL unfiltered_valid_link_url(valid_link_url);
  content::RenderProcessHost* rph = extension_host->GetProcess();
  rph->FilterURL(true, &valid_link_url);
  rph->FilterURL(true, &invalid_link_url);

  // Invalid link URLs should be changed to "about:blank#blocked" when filtered.
  EXPECT_EQ(unfiltered_valid_link_url, valid_link_url);
  EXPECT_EQ(GURL(content::kBlockedURL), invalid_link_url);
}

// This test ensures that titles are set properly for PDFs without /Title.
IN_PROC_BROWSER_TEST_P(PDFExtensionTest, TabTitleWithNoTitle) {
  ASSERT_TRUE(LoadPdf(embedded_test_server()->GetURL("/pdf/test.pdf")));

  const std::u16string kExpectedTitle = u"test.pdf";
  EXPECT_EQ(kExpectedTitle, GetEmbedderWebContents()
                                ->GetController()
                                .GetLastCommittedEntry()
                                ->GetTitleForDisplay());
  EXPECT_EQ(kExpectedTitle, GetActiveWebContents()->GetTitle());
}

// This test ensures that titles are set properly for PDFs with /Title.
IN_PROC_BROWSER_TEST_P(PDFExtensionTest, TabTitleWithTitle) {
  ASSERT_TRUE(LoadPdf(embedded_test_server()->GetURL("/pdf/test-title.pdf")));

  const std::u16string kExpectedTitle = u"PDF title test";
  EXPECT_EQ(kExpectedTitle, GetEmbedderWebContents()
                                ->GetController()
                                .GetLastCommittedEntry()
                                ->GetTitleForDisplay());
  EXPECT_EQ(kExpectedTitle, GetActiveWebContents()->GetTitle());
}

// This test ensures that titles are set properly for embedded PDFs (using data
// URL). PDF /Title should be ignored for embedded PDFs.
IN_PROC_BROWSER_TEST_P(PDFExtensionTest, TabTitleWithEmbeddedPdfDataUrl) {
  std::string url =
      embedded_test_server()->GetURL("/pdf/test-title.pdf").spec();
  std::string data_url =
      "data:text/html,"
      "<html><head><title>TabTitleWithEmbeddedPdf</title></head><body>"
      "<embed type=\"application/pdf\" src=\"" +
      url +
      "\"></body></html>";
  ASSERT_TRUE(LoadPdfInFirstChild(GURL(data_url)));
  EXPECT_EQ(u"TabTitleWithEmbeddedPdf", GetActiveWebContents()->GetTitle());
}

// This test ensures that tab titles are set properly for embedded PDFs.
// PDF /Title should be ignored for embedded PDFs.
IN_PROC_BROWSER_TEST_P(PDFExtensionTest, TabTitleWithEmbeddedPdf) {
  // Load page with embedded PDF and make sure it succeeds.
  ASSERT_TRUE(LoadPdfInFirstChild(
      embedded_test_server()->GetURL("/pdf/pdf_embed.html")));
  WebContents* web_contents = GetActiveWebContents();

  EXPECT_EQ(u"TabWithEmbeddedPdf", web_contents->GetTitle());
}

// Tests that PDF MIME type is not set for non-PDF `WebContents`.
IN_PROC_BROWSER_TEST_P(PDFExtensionTest, IsContentsMimeTypePdfNonPdf) {
  // Navigate to a non-PDF page.
  ASSERT_TRUE(ui_test_utils::NavigateToURL(
      browser(), embedded_test_server()->GetURL("/title1.html")));

  // Verify that MIME type associated with non-PDF `WebContents` is not
  // `application/pdf`.
  EXPECT_NE(pdf::kPDFMimeType, GetActiveWebContents()->GetContentsMimeType());
}

// Tests that PDF MIME type is not set for embedded PDF `WebContents`.
IN_PROC_BROWSER_TEST_P(PDFExtensionTest, IsContentsMimeTypePdfEmbedPdf) {
  // Load page with embedded PDF and make sure it succeeds.
  ASSERT_TRUE(LoadPdfInFirstChild(
      embedded_test_server()->GetURL("/pdf/pdf_embed.html")));

  // Verify that MIME type associated with embedded PDF `WebContents` is not
  // `application/pdf`.
  EXPECT_NE(pdf::kPDFMimeType, GetEmbedderWebContents()->GetContentsMimeType());
}

// Tests that PDF MIME type is set for full-page PDF `WebContents`.
IN_PROC_BROWSER_TEST_P(PDFExtensionTest, IsContentsMimeTypePdfFullPagePdf) {
  // Load a full-page PDF and make sure it succeeds.
  ASSERT_TRUE(ui_test_utils::NavigateToURL(
      browser(), embedded_test_server()->GetURL("/pdf/test.pdf")));

  // Verify that MIME type associated with full-page PDF `WebContents` is
  // `application/pdf`.
  EXPECT_EQ(pdf::kPDFMimeType, GetEmbedderWebContents()->GetContentsMimeType());
}

// Tests that PDF MIME type is set for full-page PDF `WebContents` with MIME
// type params.
// NOTE: This test is not parameterized as PDF MIME type validation for OOPIF
// variant is already being done in
// PDFExtensionOopifTest.FindFullPagePdfExtensionHostFullPagePdfWithMimeTypeParam.
IN_PROC_BROWSER_TEST_F(PDFExtensionTestWithoutOopifOverride,
                       IsContentsMimeTypePdfFullPagePdfWithMimeTypeParam) {
  // Load a full-page PDF with MIME type param and make sure it succeeds.
  const char kPdfFullPageWithMimeTypeParam[] =
      "data:application/pdf;charset=iso-8859-5;base64,"
      "JVBERi0xLjcKJaDypPQKMSAwIG9iaiA8PAogIC9UeXBlIC9DYXRhbG9nCiAgL1BhZ2VzIDIg"
      "MCBSCj4+CmVuZG9iagoyIDAgb2JqIDw8CiAgL1R5cGUgL1BhZ2VzCiAgL0NvdW50IDEKICAv"
      "S2lkcyBbMyAwIFJdCiAgL1Jlc291cmNlcyA8PCA+Pgo+PgplbmRvYmoKMyAwIG9iaiA8PAog"
      "IC9UeXBlIC9QYWdlIAogIC9QYXJlbnQgMiAwIFIKICAvTWVkaWFCb3ggWzAgMCAxMDAgNTBd"
      "Cj4+CmVuZG9iagp4cmVmCjAgNAowMDAwMDAwMDAwIDY1NTM1IGYgCjAwMDAwMDAwMTUgMDAw"
      "MDAgbiAKMDAwMDAwMDA2OCAwMDAwMCBuIAowMDAwMDAwMTUwIDAwMDAwIG4gCnRyYWlsZXIg"
      "PDwKICAvUm9vdCAxIDAgUgogIC9TaXplIDQKPj4Kc3RhcnR4cmVmCjIyNwolJUVPRgo=";
  EXPECT_TRUE(LoadPdf(GURL(kPdfFullPageWithMimeTypeParam)));

  // Verify that MIME type associated with full-page PDF `WebContents` is
  // `application/pdf`, irrespective of MIME type params (Ex: charset in this
  // test).
  EXPECT_EQ(pdf::kPDFMimeType, GetEmbedderWebContents()->GetContentsMimeType());
}

// Flaky, http://crbug.com/767427
#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_WIN) || BUILDFLAG(IS_MAC)
#define MAYBE_PdfZoomWithoutBubble DISABLED_PdfZoomWithoutBubble
#else
#define MAYBE_PdfZoomWithoutBubble PdfZoomWithoutBubble
#endif
IN_PROC_BROWSER_TEST_P(PDFExtensionTest, MAYBE_PdfZoomWithoutBubble) {
  content::RenderFrameHost* extension_host =
      LoadPdfGetExtensionHost(embedded_test_server()->GetURL("/pdf/test.pdf"));
  ASSERT_TRUE(extension_host);
  WebContents* web_contents = GetActiveWebContents();

  // Here we look at the presets to find the next zoom level above 0. Ideally
  // we should look at the zoom levels from the PDF viewer javascript, but we
  // assume they'll always match the browser presets, which are easier to
  // access. In the script below, we zoom to 100% (0), then wait for this to be
  // picked up by the browser zoom, then zoom to the next zoom level. This
  // ensures the test passes regardless of the initial default zoom level.
  std::vector<double> preset_zoom_levels = zoom::PageZoom::PresetZoomLevels(0);
  auto it = std::ranges::find(preset_zoom_levels, 0);
  ASSERT_NE(it, preset_zoom_levels.end());
  it++;
  ASSERT_NE(it, preset_zoom_levels.end());
  double new_zoom_level = *it;

  auto* zoom_controller = zoom::ZoomController::FromWebContents(web_contents);
  // We expect a ZoomChangedEvent with can_show_bubble == false if the PDF
  // extension behaviour is properly picked up. The test times out otherwise.
  zoom::ZoomChangedWatcher watcher(
      zoom_controller,
      zoom::ZoomController::ZoomChangedEventData(
          web_contents,
          web_contents->GetPrimaryMainFrame()->GetFrameTreeNodeId(), 0,
          new_zoom_level, zoom::ZoomController::ZOOM_MODE_MANUAL, false));

  // Zoom PDF via script.
#if defined(TOOLKIT_VIEWS) && !BUILDFLAG(IS_MAC)
  EXPECT_FALSE(ZoomBubbleView::GetZoomBubble());
#endif
  ASSERT_TRUE(content::ExecJs(extension_host,
                              "while (viewer.viewport.getZoom() < 1) {"
                              "  viewer.viewport.zoomIn();"
                              "}"
                              "setTimeout(() => {"
                              "  viewer.viewport.zoomIn();"
                              "}, 1);"));

  watcher.Wait();
#if defined(TOOLKIT_VIEWS) && !BUILDFLAG(IS_MAC)
  EXPECT_FALSE(ZoomBubbleView::GetZoomBubble());
#endif
}

class PDFExtensionScrollTest : public PDFExtensionTest {
 public:
  void SetUpOnMainThread() override {
    PDFExtensionTest::SetUpOnMainThread();

    GetActiveWebContents()->Resize({0, 0, 1024, 768});
  }

  void SetUpCommandLine(base::CommandLine* command_line) override {
    PDFExtensionTest::SetUpCommandLine(command_line);

    // Smooth scrolling confuses the test cases that reads the scroll bar
    // position.
    command_line->AppendSwitch(switches::kDisableSmoothScrolling);
  }

 protected:
  class ScrollEventWaiter {
   public:
    explicit ScrollEventWaiter(content::ToRenderFrameHost extension_host)
        : message_queue_(extension_host.render_frame_host()) {
      content::ExecuteScriptAsync(
          extension_host,
          R"(viewer.shadowRoot.querySelector('#scroller').onscroll = () => {
            if (viewer.viewport.scrollContent_.unackedScrollsToRemote_ === 0) {
              window.domAutomationController.send('dispatchedScrollEvent');
            }
          };
          if (viewer.viewport.scrollContent_.unackedScrollsToRemote_ === 0) {
            window.domAutomationController.send('dispatchedScrollEvent');
          })");

      // Wait for pending scroll-to-remotes to complete.
      Wait();
    }

    void Reset() { message_queue_.ClearQueue(); }

    void Wait() {
      std::string message;
      ASSERT_TRUE(message_queue_.WaitForMessage(&message));
      EXPECT_EQ("\"dispatchedScrollEvent\"", message);
    }

   private:
    content::DOMMessageQueue message_queue_;
  };

  // Scroll increment in CSS pixels. Should match `SCROLL_INCREMENT` in
  // //chrome/browser/resources/pdf/viewport.js.
  static constexpr int kScrollIncrement = 40;

  // Scrolling by a fraction of the viewport height may introduce slight
  // position differences on various platforms due to rounding. Tolerate this
  // difference.
  static constexpr float kScrollPositionEpsilon = 2.0f;

  static int GetViewportHeight(content::RenderFrameHost* extension_host) {
    return content::EvalJs(extension_host, "viewer.viewport.size.height;")
        .ExtractInt();
  }

  static int GetViewportScrollPositionX(
      content::RenderFrameHost* extension_host) {
    return content::EvalJs(extension_host, "viewer.viewport.position.x;")
        .ExtractInt();
  }

  static int GetViewportScrollPositionY(
      content::RenderFrameHost* extension_host) {
    return content::EvalJs(extension_host, "viewer.viewport.position.y;")
        .ExtractInt();
  }
};

IN_PROC_BROWSER_TEST_P(PDFExtensionScrollTest, WithSpace) {
  content::RenderFrameHost* extension_host = LoadPdfGetExtensionHost(
      embedded_test_server()->GetURL("/pdf/test-bookmarks.pdf"));
  ASSERT_TRUE(extension_host);

  SetInputFocusOnPlugin(extension_host, GetEmbedderWebContents());
  ASSERT_EQ(0, GetViewportScrollPositionY(extension_host));

  // Get the viewport height, since the scroll distance is based on it.
  const int viewport_height = GetViewportHeight(extension_host);
  ASSERT_GT(viewport_height, 0);

  // For web content, page down / page up scrolling only scrolls by a fraction
  // of the viewport height. The PDF Viewer should match that behavior.
  const float scroll_height =
      viewport_height * cc::kMinFractionToStepWhenPaging;

  // Press Space to scroll down.
  ScrollEventWaiter scroll_waiter(extension_host);
  content::SimulateKeyPress(GetActiveWebContents(),
                            ui::DomKey::FromCharacter(' '), ui::DomCode::SPACE,
                            ui::VKEY_SPACE,
                            /*control=*/false, /*shift=*/false, /*alt=*/false,
                            /*command=*/false);
  ASSERT_NO_FATAL_FAILURE(scroll_waiter.Wait());
  EXPECT_NEAR(scroll_height, GetViewportScrollPositionY(extension_host),
              kScrollPositionEpsilon);

  // Press Space to scroll down again.
  scroll_waiter.Reset();
  content::SimulateKeyPress(GetActiveWebContents(),
                            ui::DomKey::FromCharacter(' '), ui::DomCode::SPACE,
                            ui::VKEY_SPACE,
                            /*control=*/false, /*shift=*/false, /*alt=*/false,
                            /*command=*/false);
  ASSERT_NO_FATAL_FAILURE(scroll_waiter.Wait());
  EXPECT_NEAR(scroll_height * 2, GetViewportScrollPositionY(extension_host),
              kScrollPositionEpsilon);

  // Press Shift+Space to scroll up.
  scroll_waiter.Reset();
  content::SimulateKeyPress(GetActiveWebContents(),
                            ui::DomKey::FromCharacter(' '), ui::DomCode::SPACE,
                            ui::VKEY_SPACE,
                            /*control=*/false, /*shift=*/true, /*alt=*/false,
                            /*command=*/false);
  ASSERT_NO_FATAL_FAILURE(scroll_waiter.Wait());
  EXPECT_NEAR(scroll_height, GetViewportScrollPositionY(extension_host),
              kScrollPositionEpsilon);
}

IN_PROC_BROWSER_TEST_P(PDFExtensionScrollTest, WithPageDownUp) {
  content::RenderFrameHost* extension_host = LoadPdfGetExtensionHost(
      embedded_test_server()->GetURL("/pdf/test-bookmarks.pdf"));
  ASSERT_TRUE(extension_host);

  SetInputFocusOnPlugin(extension_host, GetEmbedderWebContents());
  ASSERT_EQ(0, GetViewportScrollPositionY(extension_host));

  // Get the viewport height, since the scroll distance is based on it.
  const int viewport_height = GetViewportHeight(extension_host);
  ASSERT_GT(viewport_height, 0);

  // For web content, page down / page up scrolling only scrolls by a fraction
  // of the viewport height. The PDF Viewer should match that behavior.
  const float scroll_height =
      viewport_height * cc::kMinFractionToStepWhenPaging;

  // Press PageDown to scroll down.
  ScrollEventWaiter scroll_waiter(extension_host);
  content::SimulateKeyPressWithoutChar(GetActiveWebContents(),
                                       ui::DomKey::PAGE_DOWN,
                                       ui::DomCode::PAGE_DOWN, ui::VKEY_NEXT,
                                       /*control=*/false, /*shift=*/false,
                                       /*alt=*/false,
                                       /*command=*/false);
  ASSERT_NO_FATAL_FAILURE(scroll_waiter.Wait());
  EXPECT_NEAR(scroll_height, GetViewportScrollPositionY(extension_host),
              kScrollPositionEpsilon);

  // Press PageDown to scroll down again.
  scroll_waiter.Reset();
  content::SimulateKeyPressWithoutChar(GetActiveWebContents(),
                                       ui::DomKey::PAGE_DOWN,
                                       ui::DomCode::PAGE_DOWN, ui::VKEY_NEXT,
                                       /*control=*/false, /*shift=*/false,
                                       /*alt=*/false,
                                       /*command=*/false);
  ASSERT_NO_FATAL_FAILURE(scroll_waiter.Wait());
  EXPECT_NEAR(scroll_height * 2, GetViewportScrollPositionY(extension_host),
              kScrollPositionEpsilon);

  // Press PageUp to scroll up.
  scroll_waiter.Reset();
  content::SimulateKeyPressWithoutChar(
      GetActiveWebContents(), ui::DomKey::PAGE_UP, ui::DomCode::PAGE_UP,
      ui::VKEY_PRIOR,
      /*control=*/false, /*shift=*/false, /*alt=*/false,
      /*command=*/false);
  ASSERT_NO_FATAL_FAILURE(scroll_waiter.Wait());
  EXPECT_NEAR(scroll_height, GetViewportScrollPositionY(extension_host),
              kScrollPositionEpsilon);
}

IN_PROC_BROWSER_TEST_P(PDFExtensionScrollTest, WithArrowLeftRight) {
  content::RenderFrameHost* extension_host = LoadPdfGetExtensionHost(
      embedded_test_server()->GetURL("/pdf/test-bookmarks.pdf#zoom=200"));
  ASSERT_TRUE(extension_host);

  SetInputFocusOnPlugin(extension_host, GetEmbedderWebContents());
  ASSERT_EQ(0, GetViewportScrollPositionY(extension_host));

  // Press ArrowRight to scroll right.
  ScrollEventWaiter scroll_waiter(extension_host);
  content::SimulateKeyPressWithoutChar(GetActiveWebContents(),
                                       ui::DomKey::ARROW_RIGHT,
                                       ui::DomCode::ARROW_RIGHT, ui::VKEY_RIGHT,
                                       /*control=*/false, /*shift=*/false,
                                       /*alt=*/false,
                                       /*command=*/false);
  ASSERT_NO_FATAL_FAILURE(scroll_waiter.Wait());
  EXPECT_EQ(kScrollIncrement, GetViewportScrollPositionX(extension_host));

  // Press ArrowRight to scroll right again.
  scroll_waiter.Reset();
  content::SimulateKeyPressWithoutChar(GetActiveWebContents(),
                                       ui::DomKey::ARROW_RIGHT,
                                       ui::DomCode::ARROW_RIGHT, ui::VKEY_RIGHT,
                                       /*control=*/false, /*shift=*/false,
                                       /*alt=*/false,
                                       /*command=*/false);
  ASSERT_NO_FATAL_FAILURE(scroll_waiter.Wait());
  EXPECT_EQ(kScrollIncrement * 2, GetViewportScrollPositionX(extension_host));

  // Press ArrowLeft to scroll left.
  scroll_waiter.Reset();
  content::SimulateKeyPressWithoutChar(GetActiveWebContents(),
                                       ui::DomKey::ARROW_LEFT,
                                       ui::DomCode::ARROW_LEFT, ui::VKEY_LEFT,
                                       /*control=*/false, /*shift=*/false,
                                       /*alt=*/false,
                                       /*command=*/false);
  ASSERT_NO_FATAL_FAILURE(scroll_waiter.Wait());
  EXPECT_EQ(kScrollIncrement, GetViewportScrollPositionX(extension_host));
}

// TODO(crbug.com/369947144): Fix flakiness and reenable the test.
#if BUILDFLAG(IS_MAC)
#define MAYBE_WithArrowLeftRightScrollToPage \
  DISABLED_WithArrowLeftRightScrollToPage
#else
#define MAYBE_WithArrowLeftRightScrollToPage WithArrowLeftRightScrollToPage
#endif  // BUILDFLAG(IS_MAC)
IN_PROC_BROWSER_TEST_P(PDFExtensionScrollTest,
                       MAYBE_WithArrowLeftRightScrollToPage) {
  content::RenderFrameHost* extension_host = LoadPdfGetExtensionHost(
      embedded_test_server()->GetURL("/pdf/test-bookmarks.pdf"));
  ASSERT_TRUE(extension_host);

  SetInputFocusOnPlugin(extension_host, GetEmbedderWebContents());
  ASSERT_EQ(0, GetViewportScrollPositionY(extension_host));

  // Press ArrowRight to scroll to next page.
  ScrollEventWaiter scroll_waiter(extension_host);
  content::SimulateKeyPressWithoutChar(GetActiveWebContents(),
                                       ui::DomKey::ARROW_RIGHT,
                                       ui::DomCode::ARROW_RIGHT, ui::VKEY_RIGHT,
                                       /*control=*/false, /*shift=*/false,
                                       /*alt=*/false,
                                       /*command=*/false);
  ASSERT_NO_FATAL_FAILURE(scroll_waiter.Wait());
#if BUILDFLAG(IS_WIN)
  const int kFirstPosition = ui::IsFluentScrollbarEnabled() ? 917 : 915;
#elif BUILDFLAG(IS_CHROMEOS)
  constexpr int kFirstPosition = 937;
#else
  constexpr int kFirstPosition = 918;
#endif
  EXPECT_NEAR(kFirstPosition, GetViewportScrollPositionY(extension_host),
              kScrollPositionEpsilon);

  // Press ArrowRight to scroll to next page again.
  scroll_waiter.Reset();
  content::SimulateKeyPressWithoutChar(GetActiveWebContents(),
                                       ui::DomKey::ARROW_RIGHT,
                                       ui::DomCode::ARROW_RIGHT, ui::VKEY_RIGHT,
                                       /*control=*/false, /*shift=*/false,
                                       /*alt=*/false,
                                       /*command=*/false);
  ASSERT_NO_FATAL_FAILURE(scroll_waiter.Wait());
#if BUILDFLAG(IS_WIN)
  const int kSecondPosition = ui::IsFluentScrollbarEnabled() ? 1834 : 1831;
#elif BUILDFLAG(IS_CHROMEOS)
  constexpr int kSecondPosition = 1875;
#else
  constexpr int kSecondPosition = 1836;
#endif
  EXPECT_NEAR(kSecondPosition, GetViewportScrollPositionY(extension_host),
              kScrollPositionEpsilon);

  // Press ArrowLeft to scroll to previous page.
  scroll_waiter.Reset();
  content::SimulateKeyPressWithoutChar(GetActiveWebContents(),
                                       ui::DomKey::ARROW_LEFT,
                                       ui::DomCode::ARROW_LEFT, ui::VKEY_LEFT,
                                       /*control=*/false, /*shift=*/false,
                                       /*alt=*/false,
                                       /*command=*/false);
  ASSERT_NO_FATAL_FAILURE(scroll_waiter.Wait());
  EXPECT_NEAR(kFirstPosition, GetViewportScrollPositionY(extension_host),
              kScrollPositionEpsilon);
}

IN_PROC_BROWSER_TEST_P(PDFExtensionScrollTest, WithArrowDownUp) {
  content::RenderFrameHost* extension_host = LoadPdfGetExtensionHost(
      embedded_test_server()->GetURL("/pdf/test-bookmarks.pdf"));
  ASSERT_TRUE(extension_host);

  SetInputFocusOnPlugin(extension_host, GetEmbedderWebContents());
  ASSERT_EQ(0, GetViewportScrollPositionY(extension_host));

  // Press ArrowDown to scroll down.
  ScrollEventWaiter scroll_waiter(extension_host);
  content::SimulateKeyPressWithoutChar(GetActiveWebContents(),
                                       ui::DomKey::ARROW_DOWN,
                                       ui::DomCode::ARROW_DOWN, ui::VKEY_DOWN,
                                       /*control=*/false, /*shift=*/false,
                                       /*alt=*/false,
                                       /*command=*/false);
  ASSERT_NO_FATAL_FAILURE(scroll_waiter.Wait());
  EXPECT_EQ(kScrollIncrement, GetViewportScrollPositionY(extension_host));

  // Press ArrowDown to scroll down again.
  scroll_waiter.Reset();
  content::SimulateKeyPressWithoutChar(GetActiveWebContents(),
                                       ui::DomKey::ARROW_DOWN,
                                       ui::DomCode::ARROW_DOWN, ui::VKEY_DOWN,
                                       /*control=*/false, /*shift=*/false,
                                       /*alt=*/false,
                                       /*command=*/false);
  ASSERT_NO_FATAL_FAILURE(scroll_waiter.Wait());
  EXPECT_EQ(kScrollIncrement * 2, GetViewportScrollPositionY(extension_host));

  // Press ArrowUp to scroll up.
  scroll_waiter.Reset();
  content::SimulateKeyPressWithoutChar(GetActiveWebContents(),
                                       ui::DomKey::ARROW_UP,
                                       ui::DomCode::ARROW_UP, ui::VKEY_UP,
                                       /*control=*/false, /*shift=*/false,
                                       /*alt=*/false,
                                       /*command=*/false);
  ASSERT_NO_FATAL_FAILURE(scroll_waiter.Wait());
  EXPECT_EQ(kScrollIncrement, GetViewportScrollPositionY(extension_host));
}

IN_PROC_BROWSER_TEST_P(PDFExtensionTest, SelectAllShortcut) {
  content::RenderFrameHost* extension_host =
      LoadPdfGetExtensionHost(embedded_test_server()->GetURL("/pdf/test.pdf"));
  ASSERT_TRUE(extension_host);

  content::RenderFrameHost* frame =
      pdf_frame_util::FindPdfChildFrame(extension_host);
  content::RenderWidgetHostView* view = frame->GetView();
  EXPECT_THAT(view->GetSelectedText(), IsEmpty());

  base::RunLoop run_loop;
  content::TextInputManagerTester input_tester(GetActiveWebContents());
  input_tester.SetOnTextSelectionChangedCallback(run_loop.QuitClosure());

  bool control = false;
  bool command = false;
#if BUILDFLAG(IS_MAC)
  command = true;
#else
  control = true;
#endif
  content::SimulateKeyPress(GetActiveWebContents(),
                            ui::DomKey::FromCharacter('a'), ui::DomCode::US_A,
                            ui::VKEY_A, control,
                            /*shift=*/false,
                            /*alt=*/false, command);
  run_loop.Run();

#if BUILDFLAG(IS_WIN)
  constexpr char kExpectedText[] = "this is some text\r\nsome more text";
#else
  constexpr char kExpectedText[] = "this is some text\nsome more text";
#endif
  EXPECT_EQ(base::UTF16ToUTF8(view->GetSelectedText()), kExpectedText);
}

// TODO(crbug.com/40793934): Add tests for using space and shift+space shortcuts
// for scrolling PDFs.

// Test that even if a different tab is selected when a navigation occurs,
// the correct tab still gets navigated (see crbug.com/672563).
IN_PROC_BROWSER_TEST_P(PDFExtensionTest, NavigationOnCorrectTab) {
  content::RenderFrameHost* extension_host =
      LoadPdfGetExtensionHost(embedded_test_server()->GetURL("/pdf/test.pdf"));
  ASSERT_TRUE(extension_host);
  WebContents* web_contents = GetActiveWebContents();

  ui_test_utils::NavigateToURLWithDisposition(
      browser(), GURL("about:blank"), WindowOpenDisposition::NEW_FOREGROUND_TAB,
      ui_test_utils::BROWSER_TEST_WAIT_FOR_TAB |
          ui_test_utils::BROWSER_TEST_WAIT_FOR_LOAD_STOP);
  WebContents* active_web_contents = GetActiveWebContents();
  ASSERT_NE(web_contents, active_web_contents);

  content::TestNavigationObserver active_navigation_observer(
      active_web_contents);
  content::TestNavigationObserver navigation_observer(web_contents);
  ASSERT_TRUE(content::ExecJs(extension_host,
                              "viewer.navigator_.navigate("
                              "    'www.example.com',"
                              "    WindowOpenDisposition.CURRENT_TAB);"));
  navigation_observer.Wait();

  EXPECT_FALSE(navigation_observer.last_navigation_url().is_empty());
  EXPECT_TRUE(active_navigation_observer.last_navigation_url().is_empty());
  EXPECT_FALSE(active_web_contents->GetController().GetPendingEntry());
}

IN_PROC_BROWSER_TEST_P(PDFExtensionTest, MultipleDomains) {
  ASSERT_TRUE(LoadPdfInNewTab(
      embedded_test_server()->GetURL("a.com", "/pdf/test.pdf")));
  ASSERT_TRUE(LoadPdfInNewTab(
      embedded_test_server()->GetURL("b.com", "/pdf/test.pdf")));
  EXPECT_EQ(2, CountPDFProcesses());
}

namespace {

class PDFExtensionIsolatedContentTest
    : public PDFExtensionTestWithoutOopifOverride,
      public testing::WithParamInterface<std::tuple<bool, bool>> {
 protected:
  bool site_isolated() const { return std::get<0>(GetParam()); }

  bool UseOopif() const override { return std::get<1>(GetParam()); }

  std::vector<base::test::FeatureRefAndParams> GetEnabledFeatures()
      const override {
    std::vector<base::test::FeatureRefAndParams> enabled =
        PDFExtensionTestWithoutOopifOverride::GetEnabledFeatures();
    if (site_isolated()) {
      enabled.push_back({features::kSitePerProcess, {}});
    }
    return enabled;
  }

  std::vector<base::test::FeatureRef> GetDisabledFeatures() const override {
    std::vector<base::test::FeatureRef> disabled =
        PDFExtensionTestWithoutOopifOverride::GetDisabledFeatures();
    if (!site_isolated()) {
      disabled.push_back(features::kSitePerProcess);
    }
    return disabled;
  }
};

INSTANTIATE_TEST_SUITE_P(All,
                         PDFExtensionIsolatedContentTest,
                         testing::Combine(testing::Bool(), testing::Bool()),
                         PDFExtensionIsolatedContentTestPassToString());

}  // namespace

// Makes sure `PDFExtensionIsolatedContentTest` runs with and without Site
// Isolation enabled (see crbug.com/1298269).
//
// This is a separate test because fatal assertions in `SetUpInMainThread()`
// don't terminate early, so there's no point asserting before every test.
IN_PROC_BROWSER_TEST_P(PDFExtensionIsolatedContentTest, ExpectSiteIsolation) {
  EXPECT_EQ(site_isolated(),
            content::SiteIsolationPolicy::UseDedicatedProcessesForAllSites());
}

IN_PROC_BROWSER_TEST_P(PDFExtensionIsolatedContentTest, PdfAndHtml) {
  content::RenderProcessHost::SetMaxRendererProcessCount(1);

  // Load a page with an embedded PDF and an HTML iframe, both of the same
  // origin.
  const GURL main_url(
      embedded_test_server()->GetURL("/pdf/embed_pdf_and_html.html"));

  if (UseOopif()) {
    ASSERT_TRUE(ui_test_utils::NavigateToURL(browser(), main_url));

    // The PDF embed is the second child of the HTML page.
    content::RenderFrameHost* pdf_embed =
        ChildFrameAt(GetActiveWebContents(), 1);
    ASSERT_TRUE(GetTestPdfViewerStreamManager(GetActiveWebContents())
                    ->WaitUntilPdfLoaded(pdf_embed));
  } else {
    ASSERT_TRUE(LoadPdf(main_url));
  }

  // The PDF plugin frame and the iframe should not share renderer processes
  // even though they share origins.
  std::vector<content::RenderFrameHost*> plugin_frames =
      GetPdfPluginFrames(GetActiveWebContents());
  ASSERT_EQ(plugin_frames.size(), 1u);

  content::RenderFrameHost* iframe = ChildFrameAt(GetActiveWebContents(), 0);
  ASSERT_TRUE(iframe);
  EXPECT_EQ(iframe->GetLastCommittedURL(),
            embedded_test_server()->GetURL("/title1.html"));

  EXPECT_EQ(plugin_frames[0]->GetLastCommittedOrigin(),
            iframe->GetLastCommittedOrigin());
  EXPECT_NE(plugin_frames[0]->GetProcess(), iframe->GetProcess());
  EXPECT_EQ(
      content::SiteIsolationPolicy::AreOriginKeyedProcessesEnabledByDefault(),
      content::HasOriginKeyedProcess(plugin_frames[0]));
}

IN_PROC_BROWSER_TEST_P(PDFExtensionIsolatedContentTest, DataNavigation) {
  content::RenderFrameHost* extension_host =
      LoadPdfInFirstChildGetExtensionHost(
          embedded_test_server()->GetURL("/pdf/data_url_rectangles.html"));
  ASSERT_TRUE(extension_host);

  // The PDF plugin frame and the extension main frame should not share renderer
  // processes even though the extension triggers a data: navigation when
  // loading its plugin.
  std::vector<content::RenderFrameHost*> plugin_frames =
      GetPdfPluginFrames(GetActiveWebContents());
  ASSERT_EQ(plugin_frames.size(), 1u);
  EXPECT_NE(plugin_frames[0]->GetProcess(), extension_host->GetProcess());
}

IN_PROC_BROWSER_TEST_P(PDFExtensionIsolatedContentTest, HistoryNavigation) {
  // Navigating to a PDF should spawn a PDF renderer process.
  EXPECT_TRUE(LoadPdf(embedded_test_server()->GetURL("/pdf/test.pdf")));
  EXPECT_EQ(CountPDFProcesses(), 1);

  // Navigating to non-PDF content should remove the PDF renderer process.
  EXPECT_TRUE(ui_test_utils::NavigateToURL(
      browser(), embedded_test_server()->GetURL("/title1.html")));
  EXPECT_EQ(CountPDFProcesses(), 0);

  // Navigating back to the PDF should once again spawn a PDF renderer process.
  WebContents* web_contents = GetActiveWebContents();
  web_contents->GetController().GoBack();
  EXPECT_TRUE(content::WaitForLoadStop(web_contents));
  EXPECT_TRUE(pdf_extension_test_util::EnsurePDFHasLoaded(web_contents));
  EXPECT_EQ(CountPDFProcesses(), 1);
}

IN_PROC_BROWSER_TEST_P(PDFExtensionIsolatedContentTest, Jitless) {
  ASSERT_TRUE(LoadPdf(embedded_test_server()->GetURL("/pdf/test.pdf")));

  // PDF content should always be in JIT-less processes.
  std::vector<content::RenderFrameHost*> plugin_frames =
      GetPdfPluginFrames(GetActiveWebContents());
  ASSERT_EQ(plugin_frames.size(), 1u);
  EXPECT_TRUE(plugin_frames[0]->GetProcess()->IsJitDisabled());
}

class PDFExtensionLinkClickTest : public PDFExtensionTest {
 public:
  PDFExtensionLinkClickTest() = default;
  ~PDFExtensionLinkClickTest() override = default;

 protected:
  // The rectangle of the link in test-link.pdf is [72 706 164 719] in PDF user
  // space. To calculate a position inside this rectangle, several
  // transformations have to be applied:
  // [a] (110, 110) in Blink page coordinates ->
  // [b] (219, 169) in Blink screen coordinates ->
  // [c] (115, 169) in PDF Device space coordinates ->
  // [d] (82.5, 709.5) in PDF user space coordinates.
  // This performs the [a] to [b] transformation, since that is the coordinate
  // space with respect to guest that SimulateMouseClickAt() needs.
  gfx::Point GetLinkPosition(content::RenderFrameHost* extension_host) {
    return ConvertPageCoordToScreenCoord(extension_host, {110, 110});
  }
};

IN_PROC_BROWSER_TEST_P(PDFExtensionLinkClickTest, CtrlLeft) {
  content::RenderFrameHost* extension_host = LoadPdfGetExtensionHost(
      embedded_test_server()->GetURL("/pdf/test-link.pdf"));
  ASSERT_TRUE(extension_host);

  WebContents* web_contents = GetActiveWebContents();

  SimulateMouseClickAt(extension_host, GetEmbedderWebContents(),
                       kDefaultKeyModifier, blink::WebMouseEvent::Button::kLeft,
                       GetLinkPosition(extension_host));
  ui_test_utils::TabAddedWaiter(browser()).Wait();

  int tab_count = browser()->tab_strip_model()->count();
  ASSERT_EQ(2, tab_count);

  WebContents* active_web_contents = GetActiveWebContents();
  ASSERT_EQ(web_contents, active_web_contents);

  WebContents* new_web_contents =
      browser()->tab_strip_model()->GetWebContentsAt(1);
  ASSERT_TRUE(new_web_contents);
  ASSERT_NE(web_contents, new_web_contents);

  const GURL& url = new_web_contents->GetVisibleURL();
  EXPECT_EQ("http://www.example.com/", url.spec());
}

IN_PROC_BROWSER_TEST_P(PDFExtensionLinkClickTest, Middle) {
  content::RenderFrameHost* extension_host = LoadPdfGetExtensionHost(
      embedded_test_server()->GetURL("/pdf/test-link.pdf"));
  ASSERT_TRUE(extension_host);

  WebContents* web_contents = GetActiveWebContents();

  SimulateMouseClickAt(extension_host, GetEmbedderWebContents(), 0,
                       blink::WebMouseEvent::Button::kMiddle,
                       GetLinkPosition(extension_host));
  ui_test_utils::TabAddedWaiter(browser()).Wait();

  int tab_count = browser()->tab_strip_model()->count();
  ASSERT_EQ(2, tab_count);

  WebContents* active_web_contents = GetActiveWebContents();
  ASSERT_EQ(web_contents, active_web_contents);

  WebContents* new_web_contents =
      browser()->tab_strip_model()->GetWebContentsAt(1);
  ASSERT_TRUE(new_web_contents);
  ASSERT_NE(web_contents, new_web_contents);

  const GURL& url = new_web_contents->GetVisibleURL();
  EXPECT_EQ("http://www.example.com/", url.spec());
}

IN_PROC_BROWSER_TEST_P(PDFExtensionLinkClickTest, CtrlShiftLeft) {
  content::RenderFrameHost* extension_host = LoadPdfGetExtensionHost(
      embedded_test_server()->GetURL("/pdf/test-link.pdf"));
  ASSERT_TRUE(extension_host);

  WebContents* web_contents = GetActiveWebContents();

  const int modifiers = blink::WebInputEvent::kShiftKey | kDefaultKeyModifier;

  SimulateMouseClickAt(extension_host, GetEmbedderWebContents(), modifiers,
                       blink::WebMouseEvent::Button::kLeft,
                       GetLinkPosition(extension_host));
  ui_test_utils::TabAddedWaiter(browser()).Wait();

  int tab_count = browser()->tab_strip_model()->count();
  ASSERT_EQ(2, tab_count);

  WebContents* active_web_contents = GetActiveWebContents();
  ASSERT_NE(web_contents, active_web_contents);

  const GURL& url = active_web_contents->GetVisibleURL();
  EXPECT_EQ("http://www.example.com/", url.spec());
}

IN_PROC_BROWSER_TEST_P(PDFExtensionLinkClickTest, ShiftMiddle) {
  content::RenderFrameHost* extension_host = LoadPdfGetExtensionHost(
      embedded_test_server()->GetURL("/pdf/test-link.pdf"));
  ASSERT_TRUE(extension_host);

  WebContents* web_contents = GetActiveWebContents();

  SimulateMouseClickAt(
      extension_host, GetEmbedderWebContents(), blink::WebInputEvent::kShiftKey,
      blink::WebMouseEvent::Button::kMiddle, GetLinkPosition(extension_host));
  ui_test_utils::TabAddedWaiter(browser()).Wait();

  int tab_count = browser()->tab_strip_model()->count();
  ASSERT_EQ(2, tab_count);

  WebContents* active_web_contents = GetActiveWebContents();
  ASSERT_NE(web_contents, active_web_contents);

  const GURL& url = active_web_contents->GetVisibleURL();
  EXPECT_EQ("http://www.example.com/", url.spec());
}

IN_PROC_BROWSER_TEST_P(PDFExtensionLinkClickTest, ShiftLeft) {
  content::RenderFrameHost* extension_host = LoadPdfGetExtensionHost(
      embedded_test_server()->GetURL("/pdf/test-link.pdf"));
  ASSERT_TRUE(extension_host);

  ASSERT_EQ(1U, chrome::GetTotalBrowserCount());

  WebContents* web_contents = GetActiveWebContents();

  SimulateMouseClickAt(
      extension_host, GetEmbedderWebContents(), blink::WebInputEvent::kShiftKey,
      blink::WebMouseEvent::Button::kLeft, GetLinkPosition(extension_host));
  Browser* new_browser = ui_test_utils::WaitForBrowserToOpen();
  ui_test_utils::WaitUntilBrowserBecomeActive(new_browser);

  ASSERT_EQ(2U, chrome::GetTotalBrowserCount());

  WebContents* active_web_contents =
      new_browser->tab_strip_model()->GetActiveWebContents();
  ASSERT_NE(web_contents, active_web_contents);

  const GURL& url = active_web_contents->GetVisibleURL();
  EXPECT_EQ("http://www.example.com/", url.spec());
}

// This test opens a PDF by clicking a link via javascript and verifies that
// the PDF is loaded and functional by clicking a link in the PDF. The link
// click in the PDF opens a new tab. The main page handles the pageShow event
// and updates the history state.
IN_PROC_BROWSER_TEST_P(PDFExtensionLinkClickTest, OpenPDFWithReplaceState) {
  // Navigate to the main page.
  ASSERT_TRUE(ui_test_utils::NavigateToURL(
      browser(),
      embedded_test_server()->GetURL("/pdf/pdf_href_replace_state.html")));
  WebContents* web_contents = GetActiveWebContents();
  ASSERT_TRUE(web_contents);

  // Click on the link which opens the PDF via JS.
  content::TestNavigationObserver navigation_observer(web_contents);
  const char kPdfLinkClick[] = "document.getElementById('link').click();";
  ASSERT_TRUE(content::ExecJs(web_contents, kPdfLinkClick));
  navigation_observer.Wait();
  const GURL& current_url = web_contents->GetLastCommittedURL();
  ASSERT_EQ("/pdf/test-link.pdf", current_url.path());

  ASSERT_TRUE(EnsureFullPagePDFHasLoadedWithValidFrameTree(
      web_contents, /*allow_multiple_frames=*/false));

  content::RenderFrameHost* extension_host =
      GetOnlyPdfExtensionHostEnsureValid();
  ASSERT_TRUE(extension_host);

  // Now click on the link to example.com in the PDF. This should open up a new
  // tab.
  SimulateMouseClickAt(extension_host, GetEmbedderWebContents(),
                       kDefaultKeyModifier, blink::WebMouseEvent::Button::kLeft,
                       GetLinkPosition(extension_host));

  ui_test_utils::TabAddedWaiter(browser()).Wait();

  // We should have two tabs now. One with the PDF and the second for
  // example.com
  int tab_count = browser()->tab_strip_model()->count();
  ASSERT_EQ(2, tab_count);

  WebContents* active_web_contents = GetActiveWebContents();
  ASSERT_EQ(web_contents, active_web_contents);

  WebContents* new_web_contents =
      browser()->tab_strip_model()->GetWebContentsAt(1);
  ASSERT_TRUE(new_web_contents);
  ASSERT_NE(web_contents, new_web_contents);

  const GURL& url = new_web_contents->GetVisibleURL();
  EXPECT_EQ("http://www.example.com/", url.spec());
}

namespace {
// Fails the test if a navigation is started in the given WebContents.
class FailOnNavigation : public content::WebContentsObserver {
 public:
  explicit FailOnNavigation(WebContents* contents)
      : content::WebContentsObserver(contents) {}

  // content::WebContentsObserver:
  void DidStartNavigation(
      content::NavigationHandle* navigation_handle) override {
    ADD_FAILURE() << "Unexpected navigation";
  }
};
}  // namespace

// If the PDF viewer can't navigate the tab using a tab id, make sure it doesn't
// try to navigate the extension frame.
// Regression test for https://crbug.com/1158381
IN_PROC_BROWSER_TEST_P(PDFExtensionLinkClickTest, LinkClickInPdfInNonTab) {
  // For ease of testing, we'll still load the PDF in a tab, but we clobber the
  // tab id in the viewer to make it think it's not in a tab.
  content::RenderFrameHost* extension_host = LoadPdfGetExtensionHost(
      embedded_test_server()->GetURL("/pdf/test-link.pdf"));
  ASSERT_TRUE(extension_host);
  ASSERT_TRUE(
      content::ExecJs(extension_host,
                      "window.viewer.browserApi.getStreamInfo().tabId = "
                      "    chrome.tabs.TAB_ID_NONE;"));

  content::WebContents* target_contents = GetActiveWebContents();
  if (!UseOopif()) {
    MimeHandlerViewGuest* guest =
        pdf_extension_test_util::GetOnlyMimeHandlerView(target_contents);
    ASSERT_TRUE(guest);
    target_contents = guest->web_contents();
    EXPECT_NE(GetActiveWebContents(), target_contents);
  }

  FailOnNavigation fail_if_mimehandler_navigates(target_contents);
  SimulateMouseClickAt(extension_host, GetEmbedderWebContents(),
                       blink::WebInputEvent::kNoModifiers,
                       blink::WebMouseEvent::Button::kLeft,
                       GetLinkPosition(extension_host));

  // The PDF extension frame must not navigate away. If
  // `fail_if_mimehandler_navigates` doesn't see a navigation, we consider the
  // test to have passed.
  base::RunLoop run_loop;
  base::SingleThreadTaskRunner::GetCurrentDefault()->PostDelayedTask(
      FROM_HERE, run_loop.QuitClosure(), TestTimeouts::tiny_timeout());
  run_loop.Run();
}

class PDFExtensionInternalLinkClickTest : public PDFExtensionTest {
 public:
  PDFExtensionInternalLinkClickTest() = default;
  ~PDFExtensionInternalLinkClickTest() override = default;

 protected:
  gfx::Point GetLinkPosition(content::RenderFrameHost* extension_host) {
    // The whole first page is a link.
    return ConvertPageCoordToScreenCoord(extension_host, {100, 100});
  }
};

IN_PROC_BROWSER_TEST_P(PDFExtensionInternalLinkClickTest, CtrlLeft) {
  content::RenderFrameHost* extension_host = LoadPdfGetExtensionHost(
      embedded_test_server()->GetURL("/pdf/test-internal-link.pdf"));
  ASSERT_TRUE(extension_host);

  WebContents* web_contents = GetActiveWebContents();

  SimulateMouseClickAt(extension_host, GetEmbedderWebContents(),
                       kDefaultKeyModifier, blink::WebMouseEvent::Button::kLeft,
                       GetLinkPosition(extension_host));
  ui_test_utils::TabAddedWaiter(browser()).Wait();

  int tab_count = browser()->tab_strip_model()->count();
  ASSERT_EQ(2, tab_count);

  WebContents* active_web_contents = GetActiveWebContents();
  ASSERT_EQ(web_contents, active_web_contents);

  WebContents* new_web_contents =
      browser()->tab_strip_model()->GetWebContentsAt(1);
  ASSERT_TRUE(new_web_contents);
  ASSERT_NE(web_contents, new_web_contents);

  const GURL& url = new_web_contents->GetVisibleURL();
  EXPECT_EQ("/pdf/test-internal-link.pdf", url.path());
  EXPECT_EQ("page=2&zoom=100,0,200", url.ref());
}

IN_PROC_BROWSER_TEST_P(PDFExtensionInternalLinkClickTest, Middle) {
  content::RenderFrameHost* extension_host = LoadPdfGetExtensionHost(
      embedded_test_server()->GetURL("/pdf/test-internal-link.pdf"));
  ASSERT_TRUE(extension_host);

  WebContents* web_contents = GetActiveWebContents();

  SimulateMouseClickAt(extension_host, GetEmbedderWebContents(), 0,
                       blink::WebMouseEvent::Button::kMiddle,
                       GetLinkPosition(extension_host));
  ui_test_utils::TabAddedWaiter(browser()).Wait();

  int tab_count = browser()->tab_strip_model()->count();
  ASSERT_EQ(2, tab_count);

  WebContents* active_web_contents = GetActiveWebContents();
  ASSERT_EQ(web_contents, active_web_contents);

  WebContents* new_web_contents =
      browser()->tab_strip_model()->GetWebContentsAt(1);
  ASSERT_TRUE(new_web_contents);
  ASSERT_NE(web_contents, new_web_contents);

  const GURL& url = new_web_contents->GetVisibleURL();
  EXPECT_EQ("/pdf/test-internal-link.pdf", url.path());
  EXPECT_EQ("page=2&zoom=100,0,200", url.ref());
}

IN_PROC_BROWSER_TEST_P(PDFExtensionInternalLinkClickTest, ShiftLeft) {
  content::RenderFrameHost* extension_host = LoadPdfGetExtensionHost(
      embedded_test_server()->GetURL("/pdf/test-internal-link.pdf"));
  ASSERT_TRUE(extension_host);

  ASSERT_EQ(1U, chrome::GetTotalBrowserCount());

  WebContents* web_contents = GetActiveWebContents();

  SimulateMouseClickAt(
      extension_host, GetEmbedderWebContents(), blink::WebInputEvent::kShiftKey,
      blink::WebMouseEvent::Button::kLeft, GetLinkPosition(extension_host));
  Browser* new_browser = ui_test_utils::WaitForBrowserToOpen();
  ui_test_utils::WaitUntilBrowserBecomeActive(new_browser);

  ASSERT_EQ(2U, chrome::GetTotalBrowserCount());

  WebContents* active_web_contents =
      new_browser->tab_strip_model()->GetActiveWebContents();
  ASSERT_NE(web_contents, active_web_contents);

  const GURL& url = active_web_contents->GetVisibleURL();
  EXPECT_EQ("/pdf/test-internal-link.pdf", url.path());
  EXPECT_EQ("page=2&zoom=100,0,200", url.ref());
}

class PDFExtensionComboBoxTest : public PDFExtensionTest {
 public:
  // Returns a point near the left edge of the editable combo box in
  // combobox_form.pdf, inside the combo box rect. The point is in Blink screen
  // coordinates.
  //
  // The combo box's rect is [100 50 200 80] in PDF user space. (136, 318) in
  // Blink page coordinates corresponds to approximately (102, 62) in PDF user
  // space coordinates. See PDFExtensionLinkClickTest::GetLinkPosition() for
  // more information on all the coordinate systems involved.
  gfx::Point GetEditableComboBoxLeftPosition(
      content::RenderFrameHost* extension_host) {
    return ConvertPageCoordToScreenCoord(extension_host, {136, 318});
  }

  void ClickLeftSideOfEditableComboBox(
      content::RenderFrameHost* extension_host) {
    SimulateMouseClickAt(extension_host, GetEmbedderWebContents(), 0,
                         blink::WebMouseEvent::Button::kLeft,
                         GetEditableComboBoxLeftPosition(extension_host));

    // Make sure mouse events are sent completely before proceeding, in order to
    // avoid races with subsequent keyboard events.
    content::InputEventAckWaiter mouse_waiter(
        pdf_frame_util::FindPdfChildFrame(extension_host)
            ->GetRenderWidgetHost(),
        blink::WebInputEvent::Type::kMouseUp);
    mouse_waiter.Wait();
  }

  void TypeHello(content::RenderFrameHost* extension_host) {
    struct KeyData {
      char ch;
      ui::DomCode code;
      ui::KeyboardCode key_code;
    };

    constexpr KeyData kData[] = {
        {'H', ui::DomCode::US_H, ui::VKEY_H},
        {'E', ui::DomCode::US_E, ui::VKEY_E},
        {'L', ui::DomCode::US_L, ui::VKEY_L},
        {'L', ui::DomCode::US_L, ui::VKEY_L},
        {'O', ui::DomCode::US_O, ui::VKEY_O},
    };

    content::RenderFrameHost* plugin_frame =
        pdf_frame_util::FindPdfChildFrame(extension_host);
    // Make sure that the plugin frame of guest has focus.
    ASSERT_EQ(GetActiveWebContents()->GetFocusedFrame(), plugin_frame);
    for (const auto& data : kData) {
      content::SimulateKeyPress(GetEmbedderWebContents(),
                                ui::DomKey::FromCharacter(data.ch), data.code,
                                data.key_code, /*control=*/false,
                                /*shift=*/false, /*alt=*/false,
                                /*command=*/false);
      content::InputEventAckWaiter key_waiter(
          plugin_frame->GetRenderWidgetHost(),
          blink::WebInputEvent::Type::kKeyUp);
      key_waiter.Wait();
    }
  }

  // Presses the left arrow key.
  void PressLeftArrow(content::RenderFrameHost* extension_host) {
    // Make sure that the plugin frame of guest has focus.
    ASSERT_EQ(GetActiveWebContents()->GetFocusedFrame(),
              pdf_frame_util::FindPdfChildFrame(extension_host));
    content::SimulateKeyPressWithoutChar(
        GetEmbedderWebContents(), ui::DomKey::ARROW_LEFT,
        ui::DomCode::ARROW_LEFT, ui::VKEY_LEFT, false, false, false, false);
  }

  // Presses down shift, presses the left arrow, and lets go of shift.
  void PressShiftLeftArrow(content::RenderFrameHost* extension_host) {
    // Make sure that the plugin frame of guest has focus.
    ASSERT_EQ(GetActiveWebContents()->GetFocusedFrame(),
              pdf_frame_util::FindPdfChildFrame(extension_host));
    content::SimulateKeyPressWithoutChar(GetEmbedderWebContents(),
                                         ui::DomKey::ARROW_LEFT,
                                         ui::DomCode::ARROW_LEFT, ui::VKEY_LEFT,
                                         false, /*shift=*/true, false, false);
  }

  // Presses the right arrow key.
  void PressRightArrow(content::RenderFrameHost* extension_host) {
    // Make sure that the plugin frame of guest has focus.
    ASSERT_EQ(GetActiveWebContents()->GetFocusedFrame(),
              pdf_frame_util::FindPdfChildFrame(extension_host));
    content::SimulateKeyPressWithoutChar(
        GetEmbedderWebContents(), ui::DomKey::ARROW_RIGHT,
        ui::DomCode::ARROW_RIGHT, ui::VKEY_RIGHT, false, false, false, false);
  }

  // Presses down shift, presses the right arrow, and lets go of shift.
  void PressShiftRightArrow(content::RenderFrameHost* extension_host) {
    // Make sure that the plugin frame of guest has focus.
    ASSERT_EQ(GetActiveWebContents()->GetFocusedFrame(),
              pdf_frame_util::FindPdfChildFrame(extension_host));
    content::SimulateKeyPressWithoutChar(
        GetEmbedderWebContents(), ui::DomKey::ARROW_RIGHT,
        ui::DomCode::ARROW_RIGHT, ui::VKEY_RIGHT, false, /*shift=*/true, false,
        false);
  }
};

class PDFExtensionSaveTest : public PDFExtensionComboBoxTest {
 public:
  void SetUpOnMainThread() override {
    PDFExtensionComboBoxTest::SetUpOnMainThread();

    base::ScopedAllowBlockingForTesting allow_blocking;
    ASSERT_TRUE(temp_dir_.CreateUniqueTempDir());
  }

  void SaveEditedPdf(content::RenderFrameHost* extension_host) {
    ASSERT_TRUE(content::ExecJs(
        extension_host,
        "var viewer = document.getElementById('viewer');"
        "var toolbar = viewer.shadowRoot.getElementById('toolbar');"
        "var downloads = toolbar.shadowRoot.getElementById('downloads');"
        "downloads.shadowRoot.getElementById('download-edited').click();"));
  }

  void WaitForSavedPdf(const base::FilePath& path) {
    while (!base::PathExists(path))
      content::RunAllTasksUntilIdle();
  }

  base::FilePath GetDownloadDir() const { return temp_dir_.GetPath(); }

 private:
  base::ScopedTempDir temp_dir_;
};

// Flaky, https://crbug.com/1269103, https://crbug.com/1520715
IN_PROC_BROWSER_TEST_P(PDFExtensionSaveTest, DISABLED_Save) {
  base::ScopedAllowBlockingForTesting allow_blocking;

  base::FilePath save_path = GetDownloadDir().AppendASCII("edited.pdf");
  ASSERT_FALSE(base::PathExists(save_path));

  using extensions::FileSystemChooseEntryFunction;
  const FileSystemChooseEntryFunction::TestOptions test_options{
      .path_to_be_picked = &save_path};
  auto auto_reset_options =
      FileSystemChooseEntryFunction::SetOptionsForTesting(test_options);

  content::RenderFrameHost* extension_host = LoadPdfGetExtensionHost(
      embedded_test_server()->GetURL("/pdf/combobox_form.pdf"));
  ASSERT_TRUE(extension_host);

  ClickLeftSideOfEditableComboBox(extension_host);
  TypeHello(extension_host);
  SaveEditedPdf(extension_host);
  WaitForSavedPdf(save_path);
}

class PDFExtensionSaveWithPolicyTest : public PDFExtensionSaveTest {
 public:
  // InProcessBrowserTest:
  void SetUpInProcessBrowserTestFixture() override {
    policy_provider_.SetDefaultReturns(
        /*is_initialization_complete_return=*/true,
        /*is_first_policy_load_complete_return=*/true);
    policy::BrowserPolicyConnector::SetPolicyProviderForTesting(
        &policy_provider_);
  }

  void SetDownloadPolicyManagedPath(const base::FilePath& path) {
    policy::PolicyMap policies;
    policies.Set(policy::key::kDownloadDirectory,
                 policy::POLICY_LEVEL_MANDATORY, policy::POLICY_SCOPE_USER,
                 policy::POLICY_SOURCE_CLOUD, base::Value(path.AsUTF8Unsafe()),
                 nullptr);
    policy_provider_.UpdateChromePolicy(policies);
    base::RunLoop().RunUntilIdle();
  }

  void CreateConflictingFilenames(const base::FilePath& path, int count) {
    for (int i = 0; i < count; ++i) {
      base::FilePath unique_path = base::GetUniquePath(path);
      ASSERT_TRUE(!unique_path.empty());
      ASSERT_TRUE(base::WriteFile(unique_path, ""));
    }
  }

  int CountPdfFilesInDir(const base::FilePath& dir) {
    base::FileEnumerator file_enumerator(dir,
                                         /*recursive=*/false,
                                         base::FileEnumerator::FILES,
                                         FILE_PATH_LITERAL("*.pdf"));

    int count = 0;
    for (base::FilePath file_path = file_enumerator.Next(); !file_path.empty();
         file_path = file_enumerator.Next()) {
      ++count;
    }
    return count;
  }

 private:
  testing::NiceMock<policy::MockConfigurationPolicyProvider> policy_provider_;
};

// Flaky, https://crbug.com/1269103, https://crbug.com/1520715
IN_PROC_BROWSER_TEST_P(PDFExtensionSaveWithPolicyTest,
                       DISABLED_SaveWithPolicy) {
  base::ScopedAllowBlockingForTesting allow_blocking;

  base::FilePath save_path = GetDownloadDir().AppendASCII("combobox_form.pdf");
  ASSERT_FALSE(base::PathExists(save_path));

  SetDownloadPolicyManagedPath(GetDownloadDir());
  DownloadPrefs::FromBrowserContext(profile())
      ->SkipSanitizeDownloadTargetPathForTesting();

  content::RenderFrameHost* extension_host = LoadPdfGetExtensionHost(
      embedded_test_server()->GetURL("/pdf/combobox_form.pdf"));
  ASSERT_TRUE(extension_host);

  ClickLeftSideOfEditableComboBox(extension_host);
  TypeHello(extension_host);
  SaveEditedPdf(extension_host);
  WaitForSavedPdf(save_path);
}

// Flaky, https://crbug.com/1269103, https://crbug.com/1520715
IN_PROC_BROWSER_TEST_P(PDFExtensionSaveWithPolicyTest,
                       DISABLED_SaveWithPolicyUniqueNumberSuffix) {
  base::ScopedAllowBlockingForTesting allow_blocking;

  CreateConflictingFilenames(GetDownloadDir().AppendASCII("combobox_form.pdf"),
                             5);
  EXPECT_EQ(5, CountPdfFilesInDir(GetDownloadDir()));

  base::FilePath save_path =
      GetDownloadDir().AppendASCII("combobox_form (5).pdf");
  ASSERT_FALSE(base::PathExists(save_path));

  SetDownloadPolicyManagedPath(GetDownloadDir());
  DownloadPrefs::FromBrowserContext(profile())
      ->SkipSanitizeDownloadTargetPathForTesting();

  content::RenderFrameHost* extension_host = LoadPdfGetExtensionHost(
      embedded_test_server()->GetURL("/pdf/combobox_form.pdf"));
  ASSERT_TRUE(extension_host);

  ClickLeftSideOfEditableComboBox(extension_host);
  TypeHello(extension_host);
  SaveEditedPdf(extension_host);
  WaitForSavedPdf(save_path);
}

// TODO(crbug.com/40803991): Make this test non-flaky.
IN_PROC_BROWSER_TEST_P(PDFExtensionSaveWithPolicyTest,
                       DISABLED_SaveWithPolicyUniqueTimeSuffix) {
  base::ScopedAllowBlockingForTesting allow_blocking;

  CreateConflictingFilenames(GetDownloadDir().AppendASCII("combobox_form.pdf"),
                             101);
  EXPECT_EQ(101, CountPdfFilesInDir(GetDownloadDir()));

  SetDownloadPolicyManagedPath(GetDownloadDir());
  DownloadPrefs::FromBrowserContext(profile())
      ->SkipSanitizeDownloadTargetPathForTesting();

  content::RenderFrameHost* extension_host = LoadPdfGetExtensionHost(
      embedded_test_server()->GetURL("/pdf/combobox_form.pdf"));
  ASSERT_TRUE(extension_host);

  ClickLeftSideOfEditableComboBox(extension_host);
  TypeHello(extension_host);
  SaveEditedPdf(extension_host);
  while (CountPdfFilesInDir(GetDownloadDir()) != 102)
    content::RunAllTasksUntilIdle();
}

class PDFExtensionClipboardTest : public PDFExtensionComboBoxTest,
                                  public ui::ClipboardObserver {
 public:
  // PDFExtensionTest:
  void SetUpOnMainThread() override {
    PDFExtensionTest::SetUpOnMainThread();
    ui::TestClipboard::CreateForCurrentThread();
  }
  void TearDownOnMainThread() override {
    ui::Clipboard::DestroyClipboardForCurrentThread();
    PDFExtensionTest::TearDownOnMainThread();
  }

  // ui::ClipboardObserver:
  void OnClipboardDataChanged() override {
    DCHECK(!clipboard_changed_);
    clipboard_changed_ = true;
    std::move(clipboard_quit_closure_).Run();
  }

  // Runs `action` and checks the Linux selection clipboard contains `expected`.
  void DoActionAndCheckSelectionClipboard(base::OnceClosure action,
                                          const std::string& expected) {
    if (ui::Clipboard::IsSupportedClipboardBuffer(
            ui::ClipboardBuffer::kSelection)) {
      DoActionAndCheckClipboard(std::move(action),
                                ui::ClipboardBuffer::kSelection, expected);
    } else {
      // Even though there is no selection clipboard to check, `action` still
      // needs to run.
      std::move(action).Run();
    }
  }

  // Sends a copy command and checks the copy/paste clipboard.
  // Note: Trying to send ctrl+c does not work correctly with
  // SimulateKeyPress(). Using IDC_COPY does not work on Mac in browser_tests.
  void SendCopyCommandAndCheckCopyPasteClipboard(const std::string& expected) {
    DoActionAndCheckClipboard(
        base::BindLambdaForTesting([&]() { GetEmbedderWebContents()->Copy(); }),
        ui::ClipboardBuffer::kCopyPaste, expected);
  }

 private:
  // Runs `action` and checks `clipboard_buffer` contains `expected`.
  void DoActionAndCheckClipboard(base::OnceClosure action,
                                 ui::ClipboardBuffer clipboard_buffer,
                                 const std::string& expected) {
    ASSERT_FALSE(clipboard_quit_closure_);

    ui::ClipboardMonitor::GetInstance()->AddObserver(this);
    EXPECT_FALSE(clipboard_changed_);
    clipboard_changed_ = false;

    base::RunLoop run_loop;
    clipboard_quit_closure_ = run_loop.QuitClosure();
    std::move(action).Run();
    run_loop.Run();
    EXPECT_FALSE(clipboard_quit_closure_);

    EXPECT_TRUE(clipboard_changed_);
    clipboard_changed_ = false;
    ui::ClipboardMonitor::GetInstance()->RemoveObserver(this);

    auto* clipboard = ui::Clipboard::GetForCurrentThread();
    std::string clipboard_data;
    clipboard->ReadAsciiText(clipboard_buffer, /* data_dst=*/nullptr,
                             &clipboard_data);
    EXPECT_EQ(expected, clipboard_data);
  }

  base::RepeatingClosure clipboard_quit_closure_;
  bool clipboard_changed_ = false;
};

// TODO(crbug.com/40715498): Fix flakiness.
// TODO(crbug.com/41493691): Fix flakiness.
IN_PROC_BROWSER_TEST_P(PDFExtensionClipboardTest,
                       DISABLED_IndividualShiftRightArrowPresses) {
  content::RenderFrameHost* extension_host = LoadPdfGetExtensionHost(
      embedded_test_server()->GetURL("/pdf/combobox_form.pdf"));
  ASSERT_TRUE(extension_host);

  // Give the editable combo box focus.
  ClickLeftSideOfEditableComboBox(extension_host);

  TypeHello(extension_host);

  // Put the cursor back to the left side of the combo box.
  ClickLeftSideOfEditableComboBox(extension_host);

  // Press shift + right arrow 3 times. Letting go of shift in between.
  auto action = base::BindLambdaForTesting(
      [&]() { PressShiftRightArrow(extension_host); });
  DoActionAndCheckSelectionClipboard(action, "H");
  DoActionAndCheckSelectionClipboard(action, "HE");
  DoActionAndCheckSelectionClipboard(action, "HEL");
  SendCopyCommandAndCheckCopyPasteClipboard("HEL");
}

// TODO(crbug.com/40599189): test is flaky.
IN_PROC_BROWSER_TEST_P(PDFExtensionClipboardTest,
                       DISABLED_IndividualShiftLeftArrowPresses) {
  content::RenderFrameHost* extension_host = LoadPdfGetExtensionHost(
      embedded_test_server()->GetURL("/pdf/combobox_form.pdf"));
  ASSERT_TRUE(extension_host);

  // Give the editable combo box focus.
  ClickLeftSideOfEditableComboBox(extension_host);

  TypeHello(extension_host);

  // Put the cursor back to the left side of the combo box.
  ClickLeftSideOfEditableComboBox(extension_host);

  for (int i = 0; i < 3; ++i)
    PressRightArrow(extension_host);

  // Press shift + left arrow 2 times. Letting go of shift in between.
  auto action = base::BindLambdaForTesting(
      [&]() { PressShiftLeftArrow(extension_host); });
  DoActionAndCheckSelectionClipboard(action, "L");
  DoActionAndCheckSelectionClipboard(action, "EL");
  SendCopyCommandAndCheckCopyPasteClipboard("EL");

  // Press shift + left arrow 2 times. Letting go of shift in between.
  DoActionAndCheckSelectionClipboard(action, "HEL");
  DoActionAndCheckSelectionClipboard(action, "HEL");
  SendCopyCommandAndCheckCopyPasteClipboard("HEL");
}

// Flaky, https://crbug.com/1121446, https://crbug.com/1520715
IN_PROC_BROWSER_TEST_P(PDFExtensionClipboardTest,
                       DISABLED_CombinedShiftRightArrowPresses) {
  content::RenderFrameHost* extension_host = LoadPdfGetExtensionHost(
      embedded_test_server()->GetURL("/pdf/combobox_form.pdf"));
  ASSERT_TRUE(extension_host);

  // Give the editable combo box focus.
  ClickLeftSideOfEditableComboBox(extension_host);

  TypeHello(extension_host);

  // Put the cursor back to the left side of the combo box.
  ClickLeftSideOfEditableComboBox(extension_host);

  // Press shift + right arrow 3 times. Holding down shift in between.
  {
    content::ScopedSimulateModifierKeyPress hold_shift(
        GetEmbedderWebContents(), false, true, false, false);
    auto action = base::BindLambdaForTesting([&]() {
      hold_shift.KeyPressWithoutChar(ui::DomKey::ARROW_RIGHT,
                                     ui::DomCode::ARROW_RIGHT, ui::VKEY_RIGHT);
    });
    DoActionAndCheckSelectionClipboard(action, "H");
    DoActionAndCheckSelectionClipboard(action, "HE");
    DoActionAndCheckSelectionClipboard(action, "HEL");
  }
  SendCopyCommandAndCheckCopyPasteClipboard("HEL");
}

// Flaky on multiple platforms (https://crbug.com/1121446)
IN_PROC_BROWSER_TEST_P(PDFExtensionClipboardTest,
                       DISABLED_CombinedShiftArrowPresses) {
  content::RenderFrameHost* extension_host = LoadPdfGetExtensionHost(
      embedded_test_server()->GetURL("/pdf/combobox_form.pdf"));
  ASSERT_TRUE(extension_host);

  // Give the editable combo box focus.
  ClickLeftSideOfEditableComboBox(extension_host);

  TypeHello(extension_host);

  // Put the cursor back to the left side of the combo box.
  ClickLeftSideOfEditableComboBox(extension_host);

  for (int i = 0; i < 3; ++i)
    PressRightArrow(extension_host);

  // Press shift + left arrow 3 times. Holding down shift in between.
  {
    content::ScopedSimulateModifierKeyPress hold_shift(
        GetEmbedderWebContents(), false, true, false, false);
    auto action = base::BindLambdaForTesting([&]() {
      hold_shift.KeyPressWithoutChar(ui::DomKey::ARROW_LEFT,
                                     ui::DomCode::ARROW_LEFT, ui::VKEY_LEFT);
    });
    DoActionAndCheckSelectionClipboard(action, "L");
    DoActionAndCheckSelectionClipboard(action, "EL");
    DoActionAndCheckSelectionClipboard(action, "HEL");
  }
  SendCopyCommandAndCheckCopyPasteClipboard("HEL");

  // Press shift + right arrow 2 times. Holding down shift in between.
  {
    content::ScopedSimulateModifierKeyPress hold_shift(
        GetEmbedderWebContents(), false, true, false, false);
    auto action = base::BindLambdaForTesting([&]() {
      hold_shift.KeyPressWithoutChar(ui::DomKey::ARROW_RIGHT,
                                     ui::DomCode::ARROW_RIGHT, ui::VKEY_RIGHT);
    });
    DoActionAndCheckSelectionClipboard(action, "EL");
    DoActionAndCheckSelectionClipboard(action, "L");
  }
  SendCopyCommandAndCheckCopyPasteClipboard("L");
}

// Verifies that an <embed> of size zero will still instantiate a guest and post
// message to the <embed> is correctly forwarded to the extension. This is for
// catching future regression in docs/ and slides/ pages (see
// https://crbug.com/763812).
IN_PROC_BROWSER_TEST_P(PDFExtensionTest, PostMessageForZeroSizedEmbed) {
  content::DOMMessageQueue queue(
      browser()->tab_strip_model()->GetActiveWebContents());
  ASSERT_TRUE(ui_test_utils::NavigateToURL(
      browser(), embedded_test_server()->GetURL(
                     "/pdf/post_message_zero_sized_embed.html")));
  std::string message;
  EXPECT_TRUE(queue.WaitForMessage(&message));
  EXPECT_EQ("\"POST_MESSAGE_OK\"", message);
}

// In response to the events sent in |send_events|, ensures the PDF viewer zooms
// in and that the viewer's custom pinch zooming mechanism is used to do so.
void EnsureCustomPinchZoomInvoked(content::RenderFrameHost* guest_mainframe,
                                  WebContents* contents,
                                  base::OnceClosure send_events) {
  constexpr char kListenPinchUpdate[] = R"(
      const gestureDetector = viewer.viewport.getGestureDetectorForTesting();
      var updatePromise = new Promise((resolve) => {
        gestureDetector.getEventTarget().addEventListener('pinchupdate',
                                                          resolve);
      });
  )";
  ASSERT_TRUE(content::ExecJs(guest_mainframe, kListenPinchUpdate));

  zoom::ZoomChangedWatcher zoom_watcher(
      contents,
      base::BindRepeating(
          [](const zoom::ZoomController::ZoomChangedEventData& event) {
            return event.new_zoom_level > event.old_zoom_level &&
                   event.zoom_mode == zoom::ZoomController::ZOOM_MODE_MANUAL &&
                   !event.can_show_bubble;
          }));

  std::move(send_events).Run();

  EXPECT_EQ(true, content::EvalJs(guest_mainframe,
                                  "updatePromise.then((update) => !!update);"));

  zoom_watcher.Wait();

  // Check that the browser's native pinch zoom was prevented.
  EXPECT_DOUBLE_EQ(
      1.0,
      content::EvalJs(contents, "window.visualViewport.scale").ExtractDouble());
}

// Ensure that touchpad pinch events are handled by the PDF viewer.
IN_PROC_BROWSER_TEST_P(PDFExtensionTest, TouchpadPinchInvokesCustomZoom) {
  content::RenderFrameHost* extension_host =
      LoadPdfGetExtensionHost(embedded_test_server()->GetURL("/pdf/test.pdf"));
  ASSERT_TRUE(extension_host);

  content::WaitForHitTestData(extension_host);

  base::OnceClosure send_pinch = base::BindOnce(
      [](content::RenderFrameHost* extension_host) {
        const gfx::Rect extension_host_rect =
            extension_host->GetView()->GetViewBounds();
        const gfx::Point mouse_position(extension_host_rect.width() / 2,
                                        extension_host_rect.height() / 2);
        content::SimulateGesturePinchSequence(
            extension_host->GetRenderWidgetHost(), mouse_position, 1.23,
            blink::WebGestureDevice::kTouchpad);
      },
      extension_host);

  EnsureCustomPinchZoomInvoked(extension_host, GetActiveWebContents(),
                               std::move(send_pinch));
}

#if !BUILDFLAG(IS_MAC)
// Ensure that ctrl-wheel events are handled by the PDF viewer.
IN_PROC_BROWSER_TEST_P(PDFExtensionTest, CtrlWheelInvokesCustomZoom) {
  content::RenderFrameHost* extension_host =
      LoadPdfGetExtensionHost(embedded_test_server()->GetURL("/pdf/test.pdf"));
  ASSERT_TRUE(extension_host);

  content::WaitForHitTestData(extension_host);

  base::OnceClosure send_ctrl_wheel = base::BindOnce(
      [](content::RenderFrameHost* extension_host) {
        const gfx::Rect extension_host_rect =
            extension_host->GetView()->GetViewBounds();
        const gfx::Point mouse_position(extension_host_rect.width() / 2,
                                        extension_host_rect.height() / 2);
        content::SimulateMouseWheelCtrlZoomEvent(
            extension_host->GetRenderWidgetHost(), mouse_position, true,
            blink::WebMouseWheelEvent::kPhaseBegan);
      },
      extension_host);

  EnsureCustomPinchZoomInvoked(extension_host, GetActiveWebContents(),
                               std::move(send_ctrl_wheel));
}

// Flaky on ChromeOS (https://crbug.com/922974)
#if BUILDFLAG(IS_CHROMEOS)
#define MAYBE_TouchscreenPinchInvokesCustomZoom \
  DISABLED_TouchscreenPinchInvokesCustomZoom
#else
#define MAYBE_TouchscreenPinchInvokesCustomZoom \
  TouchscreenPinchInvokesCustomZoom
#endif
IN_PROC_BROWSER_TEST_P(PDFExtensionTest,
                       MAYBE_TouchscreenPinchInvokesCustomZoom) {
  content::RenderFrameHost* extension_host =
      LoadPdfGetExtensionHost(embedded_test_server()->GetURL("/pdf/test.pdf"));
  ASSERT_TRUE(extension_host);

  content::WaitForHitTestData(extension_host);

  base::OnceClosure send_touchscreen_pinch = base::BindOnce(
      [](WebContents* web_contents, content::RenderFrameHost* extension_host) {
        const gfx::Rect extension_host_rect =
            extension_host->GetView()->GetViewBounds();
        const gfx::PointF anchor_position(extension_host_rect.width() / 2,
                                          extension_host_rect.height() / 2);
        base::RunLoop run_loop;
        content::SimulateTouchscreenPinch(web_contents, anchor_position, 1.2f,
                                          run_loop.QuitClosure());
        run_loop.Run();
      },
      GetActiveWebContents(), extension_host);

  EnsureCustomPinchZoomInvoked(extension_host, GetActiveWebContents(),
                               std::move(send_touchscreen_pinch));
}

#endif  // !BUILDFLAG(IS_MAC)

using PDFExtensionHitTestTest = PDFExtensionTest;

// Flaky in nearly all configurations; see https://crbug.com/856169.
IN_PROC_BROWSER_TEST_P(PDFExtensionHitTestTest, DISABLED_MouseLeave) {
  // Load page with embedded PDF and make sure it succeeds.
  content::RenderFrameHost* extension_host =
      LoadPdfInFirstChildGetExtensionHost(
          embedded_test_server()->GetURL("/pdf/pdf_embed.html"));
  ASSERT_TRUE(extension_host);

  WebContents* embedder_contents = GetActiveWebContents();

  content::WaitForHitTestData(extension_host);

  gfx::Point point_in_parent(250, 25);
  gfx::Point point_in_pdf(250, 250);

  // Inject script to count MouseLeaves in the PDF.
  ASSERT_TRUE(
      content::ExecJs(extension_host,
                      "var enter_count = 0;\n"
                      "var leave_count = 0;\n"
                      "document.addEventListener('mouseenter', function (){\n"
                      "  enter_count++;"
                      "});\n"
                      "document.addEventListener('mouseleave', function (){\n"
                      "  leave_count++;"
                      "});"));

  // Inject some MouseMoves to invoke a MouseLeave in the PDF.
  content::SimulateMouseEvent(embedder_contents,
                              blink::WebInputEvent::Type::kMouseMove,
                              point_in_parent);
  content::SimulateMouseEvent(
      embedder_contents, blink::WebInputEvent::Type::kMouseMove, point_in_pdf);
  content::SimulateMouseEvent(embedder_contents,
                              blink::WebInputEvent::Type::kMouseMove,
                              point_in_parent);

  // Verify MouseEnter, MouseLeave received.
  int leave_count = 0;
  do {
    leave_count = EvalJs(extension_host, "leave_count;").ExtractInt();
  } while (!leave_count);
  EXPECT_EQ(1, EvalJs(extension_host, "enter_count;"));
}

IN_PROC_BROWSER_TEST_P(PDFExtensionHitTestTest, ContextMenuCoordinates) {
  // Load page with embedded PDF and make sure it succeeds.
  content::RenderFrameHost* extension_host =
      LoadPdfInFirstChildGetExtensionHost(
          embedded_test_server()->GetURL("/pdf/pdf_embed.html"));
  ASSERT_TRUE(extension_host);

  WebContents* embedder_contents = GetActiveWebContents();

  content::WaitForHitTestData(extension_host);

  // Observe context menu IPC.
  content::RenderFrameHost* plugin_frame =
      pdf_frame_util::FindPdfChildFrame(extension_host);
  content::ContextMenuInterceptor context_menu_interceptor(plugin_frame);

  ContextMenuWaiter menu_observer;

  // Send mouse right-click to activate context menu.
  gfx::Point context_menu_position(80, 130);
  content::SimulateMouseClickAt(embedder_contents, kDefaultKeyModifier,
                                blink::WebMouseEvent::Button::kRight,
                                context_menu_position);

  // We expect the context menu, invoked via the RenderFrameHost, to be using
  // root view coordinates.
  menu_observer.WaitForMenuOpenAndClose();
  ASSERT_EQ(context_menu_position.x(), menu_observer.params().x);
  ASSERT_EQ(context_menu_position.y(), menu_observer.params().y);

  // We expect the IPC, received from the renderer, to be using local coords.
  context_menu_interceptor.Wait();
  blink::UntrustworthyContextMenuParams params =
      context_menu_interceptor.get_params();
  gfx::Point received_context_menu_position =
      plugin_frame->GetRenderWidgetHost()
          ->GetView()
          ->TransformPointToRootCoordSpace({params.x, params.y});
  EXPECT_EQ(context_menu_position, received_context_menu_position);

  // TODO(wjmaclean): If it ever becomes possible to filter outgoing IPCs from
  // the RenderProcessHost, we should verify the blink.mojom.PluginActionAt
  // message is sent with the same coordinates as in the
  // UntrustworthyContextMenuParams.
}

// The plugin document and the mime handler should both use the same background
// color.
IN_PROC_BROWSER_TEST_P(PDFExtensionTest, BackgroundColor) {
  // The background color for plugins is injected when the first response
  // is intercepted, at which point not all the plugins have loaded. This line
  // ensures that the PDF plugin has loaded and the right background color is
  // beign used.
  WaitForPluginServiceToLoad();
  content::RenderFrameHost* extension_host =
      LoadPdfGetExtensionHost(embedded_test_server()->GetURL("/pdf/test.pdf"));
  ASSERT_TRUE(extension_host);

  const std::string script =
      "window.getComputedStyle(document.body, null)."
      "getPropertyValue('background-color')";
  std::string outer =
      content::EvalJs(GetActiveWebContents(), script).ExtractString();
  std::string inner = content::EvalJs(extension_host, script).ExtractString();
  EXPECT_EQ(inner, outer);
}

IN_PROC_BROWSER_TEST_P(PDFExtensionTest, DefaultFocusForEmbeddedPDF) {
  content::RenderFrameHost* extension_host =
      LoadPdfInFirstChildGetExtensionHost(
          embedded_test_server()->GetURL("/pdf/pdf_embed.html"));
  ASSERT_TRUE(extension_host);

  // Verify that current focus state is body element.
  const std::string script =
      "const is_plugin_focused = document.activeElement === "
      "document.body;"
      "is_plugin_focused;";

  ASSERT_EQ(true, content::EvalJs(extension_host, script));
}

IN_PROC_BROWSER_TEST_P(PDFExtensionTest, DefaultFocusForNonEmbeddedPDF) {
  content::RenderFrameHost* extension_host =
      LoadPdfGetExtensionHost(embedded_test_server()->GetURL("/pdf/test.pdf"));
  ASSERT_TRUE(extension_host);

  // Verify that current focus state is document element.
  const std::string script =
      "const is_plugin_focused = document.activeElement === "
      "document.body;"
      "is_plugin_focused;";

  ASSERT_EQ(true, content::EvalJs(extension_host, script));
}

IN_PROC_BROWSER_TEST_P(PDFExtensionTest, PdfVisibility) {
  GURL url = embedded_test_server()->GetURL("/pdf/pdf_embed.html");
  EXPECT_TRUE(ui_test_utils::NavigateToURL(browser(), url));
  WebContents* web_contents =
      browser()->tab_strip_model()->GetActiveWebContents();
  EXPECT_EQ(content::Visibility::VISIBLE, web_contents->GetVisibility());

  web_contents->WasHidden();
  EXPECT_EQ(content::Visibility::HIDDEN, web_contents->GetVisibility());

  auto inner_contents = web_contents->GetInnerWebContents();
  if (base::FeatureList::IsEnabled(chrome_pdf::features::kPdfOopif)) {
    // No inner WebContents, nothing to do.
    EXPECT_EQ(0u, inner_contents.size());
    return;
  }

  ASSERT_EQ(1u, inner_contents.size());
  WebContents* inner = inner_contents[0];
  EXPECT_EQ(content::Visibility::HIDDEN, inner->GetVisibility());

  web_contents->WasShown();
  EXPECT_EQ(content::Visibility::VISIBLE, web_contents->GetVisibility());
  EXPECT_EQ(content::Visibility::VISIBLE, inner->GetVisibility());
}

// A helper for waiting for the first request for |url_to_intercept|.
class RequestWaiter {
 public:
  // Start intercepting requests to |url_to_intercept|.
  explicit RequestWaiter(const GURL& url_to_intercept)
      : url_to_intercept_(url_to_intercept),
        interceptor_(base::BindRepeating(&RequestWaiter::InterceptorCallback,
                                         base::Unretained(this))) {
    DCHECK_CURRENTLY_ON(content::BrowserThread::UI);
    DCHECK(url_to_intercept.is_valid());
  }

  RequestWaiter(const RequestWaiter&) = delete;
  RequestWaiter& operator=(const RequestWaiter&) = delete;

  void WaitForRequest() {
    DCHECK_CURRENTLY_ON(content::BrowserThread::UI);
    if (!IsAlreadyIntercepted())
      run_loop_.Run();
    DCHECK(IsAlreadyIntercepted());
  }

 private:
  bool InterceptorCallback(
      content::URLLoaderInterceptor::RequestParams* params) {
    // This method may be called either on the IO or UI thread.
    DCHECK(params);

    base::AutoLock lock(lock_);
    if (url_to_intercept_ != params->url_request.url || already_intercepted_)
      return false;

    already_intercepted_ = true;
    run_loop_.Quit();
    return false;
  }

  bool IsAlreadyIntercepted() {
    base::AutoLock lock(lock_);
    return already_intercepted_;
  }

  const GURL url_to_intercept_;
  content::URLLoaderInterceptor interceptor_;
  base::RunLoop run_loop_;

  base::Lock lock_;
  bool already_intercepted_ GUARDED_BY(lock_) = false;
};

// This is a regression test for a problem where DidStopLoading didn't get
// propagated from a remote frame into the main frame.  See also
// https://crbug.com/964364.
IN_PROC_BROWSER_TEST_P(PDFExtensionTest, DidStopLoading) {
  // Prepare to wait for requests for the main page of the MimeHandlerView for
  // PDFs.
  RequestWaiter interceptor(
      GURL("chrome-extension://mhjfbmdgcfjbbpaeojofohoefgiehjai/index.html"));

  // Navigate to a page with:
  //   <embed type="application/pdf" src="test.pdf"></embed>
  //   <iframe src="/hung"></iframe>
  // Afterwards, the main page should be still loading because of the hung
  // subframe (but the subframe for the OOPIF-based PDF MimeHandlerView might or
  // might not be created at this point).
  ui_test_utils::NavigateToURLWithDisposition(
      browser(),
      embedded_test_server()->GetURL(
          "/pdf/pdf_embed_with_hung_sibling_subframe.html"),
      WindowOpenDisposition::CURRENT_TAB,
      ui_test_utils::BROWSER_TEST_NO_WAIT);  // Don't wait for completion.

  // Wait for the request for the MimeHandlerView extension.  Afterwards, the
  // main page should be still loading because of
  // 1) the MimeHandlerView frame is loading
  // 2) the hung subframe is loading.
  interceptor.WaitForRequest();

  // Remove the hung subframe.  Afterwards the main page should stop loading as
  // soon as the MimeHandlerView frame stops loading (assumming we have not bugs
  // similar to https://crbug.com/964364).
  WebContents* web_contents = GetActiveWebContents();
  ASSERT_TRUE(content::ExecJs(
      web_contents, "document.getElementById('hung_subframe').remove();"));

  // MAIN VERIFICATION: Wait for the main frame to report that is has stopped
  // loading.
  EXPECT_TRUE(content::WaitForLoadStop(web_contents));
}

// This test verifies that it is possible to add an <embed src=pdf> element into
// a new popup window when using document.write.  See also
// https://crbug.com/1041880.
IN_PROC_BROWSER_TEST_P(PDFExtensionTest, DocumentWriteIntoNewPopup) {
  // Navigate to an empty/boring test page.
  ASSERT_TRUE(ui_test_utils::NavigateToURL(
      browser(), embedded_test_server()->GetURL("/title1.html")));

  // Open a new popup and call document.write to add an embedded PDF.
  const GURL pdf_url(embedded_test_server()->GetURL("/pdf/test.pdf"));

  content::TestNavigationObserver navigation_observer(pdf_url);
  navigation_observer.StartWatchingNewWebContents();

  WebContents* popup = nullptr;
  {
    const char kScriptTemplate[] = R"(
      const url = $1;
      const html = '<embed type="application/pdf" src="' + url + '">';

      const popup = window.open('', '_blank');
      popup.document.write(html);
  )";
    content::WebContentsAddedObserver popup_observer;
    ASSERT_TRUE(content::ExecJs(GetActiveWebContents(),
                                content::JsReplace(kScriptTemplate, pdf_url)));
    popup = popup_observer.GetWebContents();
  }

  // Wait for the PDF navigation to finish.
  navigation_observer.Wait();

  // Verify the PDF loaded successfully.
  if (UseOopif()) {
    EXPECT_TRUE(
        GetTestPdfViewerStreamManager(popup)->WaitUntilPdfLoadedInFirstChild());
  } else {
    EXPECT_TRUE(pdf_extension_test_util::EnsurePDFHasLoaded(popup));
  }
}

IN_PROC_BROWSER_TEST_P(PDFExtensionTest, LoadPdfFromExtension) {
  const extensions::Extension* test_extension = LoadExtension(
      GetTestResourcesParentDir().AppendASCII("pdf/extension_with_pdf"));
  ASSERT_TRUE(test_extension);

  EXPECT_TRUE(LoadPdf(test_extension->ResolveExtensionURL("test.pdf")));
}

// Tests that the PDF extension loads in the presence of an extension that, on
// the completion of document loading, adds an <iframe> to the body element.
// See crbug.com/40671023.
IN_PROC_BROWSER_TEST_P(PDFExtensionTest,
                       PdfLoadsWithExtensionThatInjectsFrame) {
  const extensions::Extension* test_extension = LoadExtension(
      GetTestResourcesParentDir().AppendASCII("pdf/extension_injects_iframe"));
  ASSERT_TRUE(test_extension);

  EXPECT_TRUE(LoadPdfAllowMultipleFrames(
      embedded_test_server()->GetURL("/pdf/test.pdf")));
}

IN_PROC_BROWSER_TEST_P(PDFExtensionTest, Metrics) {
  base::HistogramTester histograms;
  base::UserActionTester actions;

  ASSERT_TRUE(
      LoadPdf(embedded_test_server()->GetURL("/pdf/combobox_form.pdf")));

  metrics::SubprocessMetricsProvider::MergeHistogramDeltasForTesting();

  // Histograms.
  // Duplicating some constants to avoid reaching into pdf/ internals.
  constexpr int kAcroForm = 1;
  constexpr int k1_7 = 8;
  histograms.ExpectUniqueSample("PDF.FormType", kAcroForm, 1);
  histograms.ExpectUniqueSample("PDF.Version", k1_7, 1);
  histograms.ExpectUniqueSample("PDF.HasAttachment", 0, 1);

  // Custom histograms.
  histograms.ExpectUniqueSample("PDF.PageCount", 1, 1);

  // User actions.
  EXPECT_EQ(1, actions.GetActionCount("PDF.LoadSuccess"));
}

// Test that the PDF.LoadStatus2 metric is incremented correctly when the PDF is
// loaded with PDFium.
IN_PROC_BROWSER_TEST_P(PDFExtensionTest,
                       MetricsPDFLoadStatusLoadedPdfWithPdfium) {
  const char kPdfLoadStatusMetric[] = "PDF.LoadStatus2";
  base::HistogramTester histograms;

  histograms.ExpectBucketCount(kPdfLoadStatusMetric,
                               PDFLoadStatus::kLoadedFullPagePdfWithPdfium, 0);
  histograms.ExpectBucketCount(kPdfLoadStatusMetric,
                               PDFLoadStatus::kLoadedEmbeddedPdfWithPdfium, 0);

  EXPECT_TRUE(
      LoadPdf(embedded_test_server()->GetURL("/pdf/combobox_form.pdf")));

  histograms.ExpectBucketCount(kPdfLoadStatusMetric,
                               PDFLoadStatus::kLoadedFullPagePdfWithPdfium, 1);
  histograms.ExpectBucketCount(kPdfLoadStatusMetric,
                               PDFLoadStatus::kLoadedEmbeddedPdfWithPdfium, 0);

  EXPECT_TRUE(LoadPdfInFirstChild(
      embedded_test_server()->GetURL("/pdf/pdf_embed.html")));

  histograms.ExpectBucketCount(kPdfLoadStatusMetric,
                               PDFLoadStatus::kLoadedFullPagePdfWithPdfium, 1);
  histograms.ExpectBucketCount(kPdfLoadStatusMetric,
                               PDFLoadStatus::kLoadedEmbeddedPdfWithPdfium, 1);

  // All other buckets should not be incremented.
  histograms.ExpectBucketCount(
      kPdfLoadStatusMetric,
      PDFLoadStatus::kShowedDisabledPluginPlaceholderForEmbeddedPdf, 0);
  histograms.ExpectBucketCount(
      kPdfLoadStatusMetric, PDFLoadStatus::kTriggeredNoGestureDriveByDownload,
      0);
  histograms.ExpectBucketCount(
      kPdfLoadStatusMetric, PDFLoadStatus::kLoadedIframePdfWithNoPdfViewer, 0);
  histograms.ExpectBucketCount(
      kPdfLoadStatusMetric,
      PDFLoadStatus::kViewPdfClickedInPdfPluginPlaceholder, 0);
}

// Flaky. See https://crbug.com/1101514.
IN_PROC_BROWSER_TEST_P(PDFExtensionTest, DISABLED_TabInAndOutOfPDFPlugin) {
  content::RenderFrameHost* extension_host =
      LoadPdfGetExtensionHost(embedded_test_server()->GetURL("/pdf/test.pdf"));
  ASSERT_TRUE(extension_host);

  // Set focus on last toolbar element (zoom-out-button).
  ASSERT_TRUE(content::ExecJs(extension_host,
                              R"(viewer.shadowRoot.querySelector('#zoomToolbar')
         .$['zoom-out-button']
         .$$('cr-icon-button')
         .focus();)"));

  // The script will ensure we return the the focused element on focus.
  const char kScript[] = R"(
    const plugin = viewer.shadowRoot.querySelector('#plugin');
    plugin.addEventListener('focus', () => {
      window.domAutomationController.send('plugin');
    });

    const button = viewer.shadowRoot.querySelector('#zoomToolbar')
                   .$['zoom-out-button']
                   .$$('cr-icon-button');
    button.addEventListener('focus', () => {
      window.domAutomationController.send('zoom-out-button');
    });
  )";
  ASSERT_TRUE(content::ExecJs(extension_host, kScript));

  // Helper to simulate a tab press and wait for a focus message.
  auto press_tab_and_wait_for_message = [extension_host, this](bool reverse) {
    content::DOMMessageQueue msg_queue(extension_host);
    std::string reply;
    SimulateKeyPress(GetActiveWebContents(), ui::DomKey::TAB, ui::DomCode::TAB,
                     ui::VKEY_TAB, false, /*shift=*/reverse, false, false);
    EXPECT_TRUE(msg_queue.WaitForMessage(&reply));
    return reply;
  };

  // Press <tab> and ensure that PDF document receives focus.
  EXPECT_EQ("\"plugin\"", press_tab_and_wait_for_message(false));
  // Press <shift-tab> and ensure that last toolbar element (zoom-out-button)
  // receives focus.
  EXPECT_EQ("\"zoom-out-button\"", press_tab_and_wait_for_message(true));
}

// Test that a PDF with COEP: require-corp header can load successfully.
IN_PROC_BROWSER_TEST_P(PDFExtensionTest,
                       CrossOriginEmbedderPolicyRequireCorpPdf) {
  EXPECT_TRUE(LoadPdf(
      embedded_test_server()->GetURL("/pdf/test-coep-require-corp.pdf")));
}

// Test that a PDF with COEP: credentialless header can load successfully.
IN_PROC_BROWSER_TEST_P(PDFExtensionTest,
                       CrossOriginEmbedderPolicyCredentiallessPdf) {
  EXPECT_TRUE(LoadPdf(
      embedded_test_server()->GetURL("/pdf/test-coep-credentialless.pdf")));
}

// Test that a PDF without the COEP: require-corp header fails to load when
// embedded in a page that has the header.
IN_PROC_BROWSER_TEST_P(PDFExtensionTest,
                       CrossOriginEmbedderPolicyRequireCorpIframe) {
  EXPECT_TRUE(ui_test_utils::NavigateToURL(
      browser(), embedded_test_server()->GetURL("/pdf/test-coep-iframe.html")));

  // The PDF failed to load if there aren't any PDF extension hosts or PDF
  // plugin frames.
  WebContents* web_contents = GetActiveWebContents();
  EXPECT_TRUE(
      pdf_extension_test_util::GetPdfExtensionHosts(web_contents).empty());
  EXPECT_TRUE(
      pdf_extension_test_util::GetPdfPluginFrames(web_contents).empty());
  EXPECT_EQ(0u, pdf_extension_test_util::CountPdfPluginProcesses(browser()));
}

// Test that a data: URL PDF embed can load successfully when embedded in a page
// that has the COEP: require-corp header.
IN_PROC_BROWSER_TEST_P(PDFExtensionTest,
                       CrossOriginEmbedderPolicyDataUrlPdfIframe) {
  EXPECT_TRUE(LoadPdfInFirstChild(
      embedded_test_server()->GetURL("/pdf/test-coep-data-pdf-embed.html")));
}

class PDFExtensionPrerenderTest : public PDFExtensionTest {
 public:
  void SetUpCommandLine(base::CommandLine* command_line) override {
    PDFExtensionTest::SetUpCommandLine(command_line);
    // |prerender_helper_| has a ScopedFeatureList so we needed to delay its
    // creation until now because PDFExtensionTest also uses a ScopedFeatureList
    // and initialization order matters.
    prerender_helper_ = std::make_unique<content::test::PrerenderTestHelper>(
        base::BindRepeating(&PDFExtensionPrerenderTest::GetActiveWebContents,
                            base::Unretained(this)));
  }

  void SetUpOnMainThread() override {
    prerender_helper_->RegisterServerRequestMonitor(embedded_test_server());
    PDFExtensionTest::SetUpOnMainThread();
  }

 protected:
  void PrerenderAndExpectCancellation(const GURL& prerender_url) {
    content::test::PrerenderHostObserver observer(*GetActiveWebContents(),
                                                  prerender_url);
    prerender_helper().AddPrerenderAsync(prerender_url);
    observer.WaitForDestroyed();
  }

  content::test::PrerenderTestHelper& prerender_helper() {
    return *prerender_helper_;
  }

 private:
  std::unique_ptr<content::test::PrerenderTestHelper> prerender_helper_;
};

// TODO(crbug.com/40180674): The PDF viewer cannot currently be prerendered
// correctly. This tests that prerendering is cancelled. Once we're able to
// support this, this test should be replaced with one that prerenders the PDF
// viewer.
IN_PROC_BROWSER_TEST_P(PDFExtensionPrerenderTest, CancelPrerender) {
  const GURL initial_url =
      embedded_test_server()->GetURL("a.test", "/empty.html");
  const GURL pdf_url =
      embedded_test_server()->GetURL("a.test", "/pdf/test.pdf");
  WebContents* web_contents = GetActiveWebContents();
  ASSERT_TRUE(ui_test_utils::NavigateToURL(browser(), initial_url));

  PrerenderAndExpectCancellation(pdf_url);
  if (UseOopif()) {
    EXPECT_FALSE(pdf::PdfViewerStreamManager::FromWebContents(web_contents));
  } else {
    EXPECT_EQ(0U, GetGuestViewManager()->num_guests_created());
  }

  prerender_helper().NavigatePrimaryPage(pdf_url);
  ASSERT_EQ(web_contents->GetLastCommittedURL(), pdf_url);
  EXPECT_TRUE(EnsureFullPagePDFHasLoadedWithValidFrameTree(
      web_contents, /*allow_multiple_frames=*/false));
}

// TODO(crbug.com/40180674): The PDF viewer cannot currently be prerendered
// correctly. This tests that prerendering is cancelled if a PDF is embedded in
// a prerendered page. Once we're able to support this, this test should be
// replaced with one that prerenders the PDF viewer.
IN_PROC_BROWSER_TEST_P(PDFExtensionPrerenderTest,
                       CancelPrerenderWithEmbeddedPdf) {
  const GURL initial_url =
      embedded_test_server()->GetURL("a.test", "/empty.html");
  const GURL pdf_url =
      embedded_test_server()->GetURL("a.test", "/pdf/test-iframe.html");
  WebContents* web_contents = GetActiveWebContents();
  ASSERT_TRUE(ui_test_utils::NavigateToURL(browser(), initial_url));

  PrerenderAndExpectCancellation(pdf_url);
  if (UseOopif()) {
    EXPECT_FALSE(pdf::PdfViewerStreamManager::FromWebContents(web_contents));
  } else {
    EXPECT_EQ(0U, GetGuestViewManager()->num_guests_created());
  }

  prerender_helper().NavigatePrimaryPage(pdf_url);
  ASSERT_EQ(web_contents->GetLastCommittedURL(), pdf_url);
  if (UseOopif()) {
    EXPECT_TRUE(EnsurePDFHasLoadedInFirstChildWithValidFrameTree(web_contents));
  } else {
    EXPECT_TRUE(GetGuestViewManager()->WaitForSingleGuestViewCreated());
  }
}

// Cross-origin subframe navigations are deferred during prerendering, which
// means that an embedded cross-site PDF will not cause the PDF viewer to be
// created until prerender activation.
IN_PROC_BROWSER_TEST_P(PDFExtensionPrerenderTest,
                       PrerenderWithCrossSiteEmbeddedPdf) {
  const GURL initial_url =
      embedded_test_server()->GetURL("a.test", "/empty.html");
  const GURL pdf_url = embedded_test_server()->GetURL(
      "a.test", "/pdf/test-cross-site-iframe.html");
  WebContents* web_contents = GetActiveWebContents();
  ASSERT_TRUE(ui_test_utils::NavigateToURL(browser(), initial_url));

  content::test::PrerenderHostRegistryObserver registry_observer(*web_contents);
  prerender_helper().AddPrerenderAsync(pdf_url);
  registry_observer.WaitForTrigger(pdf_url);
  const content::FrameTreeNodeId host_id =
      prerender_helper().GetHostForUrl(pdf_url);
  EXPECT_TRUE(host_id);

  content::test::PrerenderHostObserver prerender_observer(*web_contents,
                                                          host_id);

  if (UseOopif()) {
    // There are two expected navigations in `web_contents`: the navigation to
    // the webpage containing the iframe, and the cross-site navigation to the
    // PDF in the iframe.
    content::TestNavigationObserver navigation_observer(web_contents, 2);
    prerender_helper().NavigatePrimaryPage(pdf_url);
    prerender_observer.WaitForActivation();
    navigation_observer.Wait();

    ASSERT_EQ(web_contents->GetLastCommittedURL(), pdf_url);
    ASSERT_TRUE(pdf::TestPdfViewerStreamManager::FromWebContents(web_contents));
    EXPECT_TRUE(GetTestPdfViewerStreamManager(web_contents)
                    ->WaitUntilPdfLoadedInFirstChild());
  } else {
    prerender_helper().NavigatePrimaryPage(pdf_url);
    prerender_observer.WaitForActivation();

    ASSERT_EQ(web_contents->GetLastCommittedURL(), pdf_url);
    EXPECT_TRUE(GetGuestViewManager()->WaitForSingleGuestViewCreated());
  }
}

class PDFExtensionSubmitFormTest : public PDFExtensionTest {
 public:
  void SetUpOnMainThread() override {
    embedded_test_server()->RegisterRequestMonitor(base::BindLambdaForTesting(
        [this](const net::test_server::HttpRequest& request) {
          if (request.relative_url != "/pdf/test_endpoint")
            return;

          EXPECT_EQ(request.method, net::test_server::METHOD_POST);
          EXPECT_THAT(request.content, StartsWith("\%FDF"));
          ASSERT_TRUE(quit_closure_);
          std::move(quit_closure_).Run();
        }));

    PDFExtensionTest::SetUpOnMainThread();
  }

 protected:
  // Retrieves a `base::RunLoop` and saves its `QuitClosure()`. The test
  // monitors HTTP requests on the IO thread, so `quit_closure_` needs to be set
  // up on the UI thread before the requests can arrive.
  std::unique_ptr<base::RunLoop> CreateFormSubmissionRunLoop() {
    auto run_loop = std::make_unique<base::RunLoop>();
    EXPECT_FALSE(quit_closure_);
    quit_closure_ = run_loop->QuitClosure();
    return run_loop;
  }

 private:
  base::OnceClosure quit_closure_;
};

IN_PROC_BROWSER_TEST_P(PDFExtensionSubmitFormTest, SubmitForm) {
  content::RenderFrameHost* extension_host = LoadPdfGetExtensionHost(
      embedded_test_server()->GetURL("/pdf/submit_form.pdf"));
  ASSERT_TRUE(extension_host);

  std::unique_ptr<base::RunLoop> run_loop = CreateFormSubmissionRunLoop();

  // Click on the "Submit Form" button.
  SimulateMouseClickAt(
      extension_host, GetEmbedderWebContents(),
      blink::WebInputEvent::kNoModifiers, blink::WebMouseEvent::Button::kLeft,
      ConvertPageCoordToScreenCoord(extension_host, {210, 210}));

  run_loop->Run();
}

class PDFExtensionPrerenderAndFencedFrameTest : public PDFExtensionTest {
 public:
  PDFExtensionPrerenderAndFencedFrameTest() = default;
  ~PDFExtensionPrerenderAndFencedFrameTest() override = default;

  void SetUpCommandLine(base::CommandLine* command_line) override {
    PDFExtensionTest::SetUpCommandLine(command_line);
    // `prerender_helper_` and `fenced_frame_helper_` has a ScopedFeatureList so
    // we needed to delay its creation until now because PDFExtensionTest
    // also uses a ScopedFeatureList and initialization order matters.
    prerender_helper_ = std::make_unique<content::test::PrerenderTestHelper>(
        base::BindRepeating(&PDFExtensionPrerenderTest::GetActiveWebContents,
                            base::Unretained(this)));
    fenced_frame_helper_ =
        std::make_unique<content::test::FencedFrameTestHelper>();
  }

  content::test::PrerenderTestHelper& prerender_helper() {
    return *prerender_helper_;
  }

  content::test::FencedFrameTestHelper& fenced_frame_helper() {
    return *fenced_frame_helper_;
  }

 private:
  std::unique_ptr<content::test::PrerenderTestHelper> prerender_helper_;
  std::unique_ptr<content::test::FencedFrameTestHelper> fenced_frame_helper_;
};

// TODO(crbug.com/40180674): The PDF viewer cannot currently be prerendered
// correctly. Once this is supported, this test should be re-enabled for
// GuestView PDF viewer and enabled for OOPIF PDF viewer.
IN_PROC_BROWSER_TEST_P(PDFExtensionPrerenderAndFencedFrameTest,
                       DISABLED_LoadPDFInPrerender) {
  if (UseOopif()) {
    GTEST_SKIP();
  }

  GURL url = embedded_test_server()->GetURL("/empty.html");
  ASSERT_TRUE(content::NavigateToURL(GetActiveWebContents(), url));

  TestMimeHandlerViewGuest::RegisterTestGuestViewType(GetGuestViewManager());
  // Set a 1s delay to delay MimeHandlerViewGuest's creation to ensure that the
  // fenced frame is loaded while the PDF stream is not yet consumed.
  const int creation_delay = TestTimeouts::tiny_timeout().InMilliseconds();
  TestMimeHandlerViewGuest::DelayNextCreateWebContents(creation_delay);

  // Load a PDF in the prerender.
  GURL prerender_url = embedded_test_server()->GetURL("/pdf/test.pdf");

  content::test::PrerenderHostRegistryObserver registry_observer(
      *GetActiveWebContents());
  prerender_helper().AddPrerenderAsync(prerender_url);
  registry_observer.WaitForTrigger(prerender_url);

  // Create a fenced frame.
  const GURL fenced_frame_url =
      embedded_test_server()->GetURL("/fenced_frames/title1.html");
  content::RenderFrameHost* fenced_frame_host =
      fenced_frame_helper().CreateFencedFrame(
          GetActiveWebContents()->GetPrimaryMainFrame(), fenced_frame_url);
  ASSERT_TRUE(fenced_frame_host);

  auto* guest_view = GetGuestViewManager()->WaitForSingleGuestViewCreated();
  ASSERT_TRUE(guest_view);
  TestMimeHandlerViewGuest::WaitForGuestLoadStartThenStop(guest_view);

  // Ensure that the fenced frame's navigation should not abort the PDF stream.
  EXPECT_EQ(1U, GetGuestViewManager()->GetCurrentGuestCount());
}

// Test that ensures we cannot navigate a fenced frame to a PDF because PDF
// isn't allowed by default static sandbox flags of fenced frames.
IN_PROC_BROWSER_TEST_P(PDFExtensionPrerenderAndFencedFrameTest,
                       LoadPdfInFencedFrame) {
  ASSERT_TRUE(content::NavigateToURL(
      GetActiveWebContents(), embedded_test_server()->GetURL("/empty.html")));

  // Create a fenced frame and try to navigate to a PDF.
  EXPECT_TRUE(fenced_frame_helper().CreateFencedFrame(
      GetActiveWebContents()->GetPrimaryMainFrame(),
      embedded_test_server()->GetURL("/pdf/test-fenced-frame.pdf"),
      net::Error::ERR_BLOCKED_BY_CLIENT));
  EXPECT_EQ(CountPDFProcesses(), 0);
}

// Like `LoadPdfInFencedFrame`, but without Supports-Loading-Mode headers set.
IN_PROC_BROWSER_TEST_P(PDFExtensionPrerenderAndFencedFrameTest,
                       LoadPdfInFencedFrameWithoutFencedFrameOptIn) {
  ASSERT_TRUE(content::NavigateToURL(
      GetActiveWebContents(), embedded_test_server()->GetURL("/empty.html")));

  // Create a fenced frame and try to navigate to a PDF.
  EXPECT_TRUE(fenced_frame_helper().CreateFencedFrame(
      GetActiveWebContents()->GetPrimaryMainFrame(),
      embedded_test_server()->GetURL("/pdf/test.pdf"),
      net::Error::ERR_BLOCKED_BY_RESPONSE));
  EXPECT_EQ(CountPDFProcesses(), 0);
}

// Test that ensures a fenced frame cannot load a document embedding a PDF
// because PDF isn't allowed in fenced frames.
IN_PROC_BROWSER_TEST_P(PDFExtensionPrerenderAndFencedFrameTest,
                       LoadEmbeddedPdfInFencedFrame) {
  ASSERT_TRUE(content::NavigateToURL(
      GetActiveWebContents(), embedded_test_server()->GetURL("/empty.html")));

  // Create a fenced frame for loading a document with pdf embed(s).
  content::RenderFrameHost* fenced_frame_host =
      fenced_frame_helper().CreateFencedFrame(
          GetActiveWebContents()->GetPrimaryMainFrame(),
          embedded_test_server()->GetURL("/fenced_frames/title1.html"));
  ASSERT_TRUE(fenced_frame_host);

  const GURL pdf_url =
      embedded_test_server()->GetURL("/pdf/test-fenced-frame.pdf");
  // Ensure that the fenced frame cannot load a PDF embedding with <iframe>.
  ASSERT_TRUE(content::ExecJs(
      fenced_frame_host,
      content::JsReplace("let e = document.createElement('iframe');"
                         "e.src = $1;"
                         "e.type = 'application/pdf';"
                         "document.body.appendChild(e);",
                         pdf_url)));
  ASSERT_TRUE(content::WaitForLoadStop(GetActiveWebContents()));
  EXPECT_EQ(CountPDFProcesses(), 0);

  // Ensure that the fenced frame cannot load a PDF embedding with <object>.
  ASSERT_TRUE(content::ExecJs(
      fenced_frame_host,
      content::JsReplace("let e = document.createElement('object');"
                         "e.data = $1;"
                         "e.type = 'application/pdf';"
                         "document.body.appendChild(e);",
                         pdf_url)));
  ASSERT_TRUE(content::WaitForLoadStop(GetActiveWebContents()));
  EXPECT_EQ(CountPDFProcesses(), 0);

  // Ensure that the fenced frame cannot load a PDF embedding with <embed>.
  ASSERT_TRUE(content::ExecJs(
      fenced_frame_host,
      content::JsReplace("let e = document.createElement('embed');"
                         "e.src = $1;"
                         "e.type = 'application/pdf';"
                         "document.body.appendChild(e);",
                         pdf_url)));
  ASSERT_TRUE(content::WaitForLoadStop(GetActiveWebContents()));
  EXPECT_EQ(CountPDFProcesses(), 0);
}

// Exercise a race condition where the profile is destroyed in the middle of a
// PDF navigation and ensure that this doesn't crash.  Specifically,
// `PdfNavigationThrottle` intercepts PDF navigations to PDF stream URLs,
// cancels them, and posts a task to navigate to the original URL instead.
// Triggering profile destruction after this task is posted but before it runs
// has previously led to issues in https://crbug.com/1382761.
// See PDFExtensionOopifTest.PdfNavigationDuringProfileShutdown for the OOPIF
// PDF version.
IN_PROC_BROWSER_TEST_F(PDFExtensionTestWithoutOopifOverride,
                       PdfNavigationDuringProfileShutdown) {
  // Open an Incognito window and navigate it to a page with a PDF embedded in
  // an iframe.
  Browser* incognito = CreateIncognitoBrowser();
  content::WebContents* incognito_contents =
      incognito->tab_strip_model()->GetActiveWebContents();
  incognito_contents->GetController().LoadURL(
      embedded_test_server()->GetURL("/pdf/test-cross-site-iframe.html"),
      content::Referrer(), ui::PAGE_TRANSITION_TYPED, std::string());

  // Wait for the MimeHandleView guest to be created.  This should return
  // before the actual PDF navigation in the guest is started.
  GuestViewBase* guest_view =
      GetGuestViewManagerForProfile(incognito->profile())
          ->WaitForSingleGuestViewCreated();
  ASSERT_TRUE(guest_view);

  // Look up the PDF stream URL to which the navigation will take place.
  extensions::MimeHandlerViewGuest* guest =
      extensions::MimeHandlerViewGuest::FromGuestViewBase(guest_view);
  ASSERT_TRUE(guest);
  base::WeakPtr<extensions::StreamContainer> stream = guest->GetStreamWeakPtr();
  EXPECT_TRUE(stream);
  GURL stream_url(stream->stream_url());

  // Use TestNavigationManager to wait for first yield after running
  // DidStartNavigation throttles.  This should be precisely after the
  // navigation to the stream URL gets canceled and the task to start a new
  // navigation to the original URL is scheduled.
  {
    content::TestNavigationManager manager(guest_view->web_contents(),
                                           stream_url);
    ASSERT_TRUE(manager.WaitForFirstYieldAfterDidStartNavigation());
  }

  // Now, close Incognito and destroy its profile.  This is subtle: simply
  // closing the Incognito window and waiting for browser destruction (e.g.,
  // with `ui_test_utils::WaitForBrowserToClose(incognito)`) will trigger
  // asynchronous profile destruction which will allow the PDF task to run
  // before profile destruction is complete, sidestepping the bug in
  // https://crbug.com/1382761.  Instead, use the hard shutdown/restart logic
  // similar to that in `BrowserCloseManager::CloseBrowsers()`, which is used
  // by `chrome::ExitIgnoreUnloadHandlers() and forces the `Browser` and its
  // profile shutdown to complete synchronously, but only on the Incognito
  // Browser object. Note that we can't just use
  // `chrome::ExitIgnoreUnloadHandlers()` here, as that shuts down all Browser
  // objects and the rest of the browser process and appears to be unsupported
  // in tests.
  chrome::CloseWindow(incognito);
  BrowserView* incognito_view = static_cast<BrowserView*>(incognito->window());
  incognito_view->DestroyBrowser();

  // The test succeeds if it doesn't crash when the posted PDF task attempts to
  // run (the task should be canceled/ignored), so wait for this to happen.
  base::RunLoop().RunUntilIdle();
}

// Ensure that extensions do not get multiple bound LocalMainFrames for guest
// views. This is a regression test for crbug.com/1367582.
// Not applicable to OOPIF PDF, since the bug was about iterating over a frame
// twice because of the inner WebContents.
IN_PROC_BROWSER_TEST_F(PDFExtensionTestWithoutOopifOverride,
                       ExtensionsBindingLocalHost) {
  // Load test PDF in first tab.
  const GURL main_url(embedded_test_server()->GetURL("/pdf/test.pdf"));
  ASSERT_TRUE(ui_test_utils::NavigateToURL(browser(), main_url));
  auto* primary_main_frame = GetActiveWebContents()->GetPrimaryMainFrame();

  // Verify the PDF has loaded.
  auto* guest_view = GetGuestViewManager()->WaitForSingleGuestViewCreated();
  ASSERT_TRUE(guest_view);
  EXPECT_NE(primary_main_frame, guest_view->GetGuestMainFrame());

  auto* web_contents_observer =
      extensions::ExtensionWebContentsObserver::GetForWebContents(
          GetActiveWebContents());
  primary_main_frame->ForEachRenderFrameHost(
      [web_contents_observer](content::RenderFrameHost* frame_host) {
        web_contents_observer->GetLocalFrame(frame_host);
      });
  auto* guest_view_web_contents_observer =
      extensions::ExtensionWebContentsObserver::GetForWebContents(
          guest_view->web_contents());
  guest_view->GetGuestMainFrame()->ForEachRenderFrameHost(
      [guest_view_web_contents_observer](content::RenderFrameHost* frame_host) {
        guest_view_web_contents_observer->GetLocalFrame(frame_host);
      });

  // Execute some script in each of the frames to ensure the above bindings
  // have been executed in the renderer. They would previously have caused
  // a process crash.
  EXPECT_EQ(1, content::EvalJs(primary_main_frame, "1;").ExtractInt());
  EXPECT_EQ(1, content::EvalJs(guest_view->web_contents(), "1;").ExtractInt());
}

// PDF extension tests for loading the PDF in an incognito browser.
class PDFExtensionIncognitoTest : public PDFExtensionTest {
 protected:
  void SetUpOnMainThread() override {
    PDFExtensionTest::SetUpOnMainThread();
    incognito_browser_ = CreateIncognitoBrowser();
  }

  void TearDownOnMainThread() override {
    incognito_browser_ = nullptr;
    PDFExtensionTest::TearDownOnMainThread();
  }

  Browser* incognito_browser() { return incognito_browser_; }

  content::WebContents* GetIncognitoActiveWebContents() {
    return incognito_browser()->tab_strip_model()->GetActiveWebContents();
  }

 private:
  raw_ptr<Browser> incognito_browser_ = nullptr;
};

// Test that full page PDF viewer successfully loads in incognito.
IN_PROC_BROWSER_TEST_P(PDFExtensionIncognitoTest, IncognitoFullPage) {
  // Load a direct PDF URL full page.
  ASSERT_TRUE(ui_test_utils::NavigateToURL(
      incognito_browser(), embedded_test_server()->GetURL("/pdf/test.pdf")));

  EXPECT_TRUE(EnsureFullPagePDFHasLoadedWithValidFrameTree(
      GetIncognitoActiveWebContents(), /*allow_multiple_frames=*/false));
}

// Test that an embed-embedded PDF viewer successfully loads in incognito.
IN_PROC_BROWSER_TEST_P(PDFExtensionIncognitoTest, IncognitoEmbed) {
  // Load the HTML containing an embed embedding a PDF.
  ASSERT_TRUE(ui_test_utils::NavigateToURL(
      incognito_browser(),
      embedded_test_server()->GetURL("/pdf/pdf_embed.html")));

  EXPECT_TRUE(EnsurePDFHasLoadedInFirstChildWithValidFrameTree(
      GetIncognitoActiveWebContents()));
}

// Test that an iframe-embedded PDF viewer successfully loads in incognito.
IN_PROC_BROWSER_TEST_P(PDFExtensionIncognitoTest, IncognitoIframe) {
  if (!UseOopif()) {
    GTEST_SKIP() << "GuestView PDF viewer cannot ensure PDF load in an iframe.";
  }

  // Load the HTML containing an iframe embedding a PDF.
  ASSERT_TRUE(ui_test_utils::NavigateToURL(
      incognito_browser(),
      embedded_test_server()->GetURL("/pdf/test-iframe.html")));

  // Verify the pdf has loaded. The test will timeout if the PDF fails to
  // load.
  ASSERT_TRUE(GetTestPdfViewerStreamManager(GetIncognitoActiveWebContents())
                  ->WaitUntilPdfLoadedInFirstChild());
}

class PDFExtensionSameSiteProcessTest : public PDFExtensionTest {
 public:
  PDFExtensionSameSiteProcessTest() = default;
  ~PDFExtensionSameSiteProcessTest() override = default;

 protected:
  // Same as `PDFExtensionTestBase::LoadPdfGetExtensionHost()`, but with the PDF
  // content host instead of the PDF extension host.
  content::RenderFrameHost* LoadPdfGetContentHost(const GURL& url) {
    if (!LoadPdf(url)) {
      ADD_FAILURE() << "Failed to load PDF";
      return nullptr;
    }

    return pdf_extension_test_util::GetOnlyPdfPluginFrame(
        GetActiveWebContents());
  }

  // Same as `PDFExtensionTestBase::LoadPdfInNewTabGetExtensionHost()`, but with
  // the PDF content host instead of the PDF extension host.
  content::RenderFrameHost* LoadPdfInNewTabGetContentHost(const GURL& url) {
    if (!LoadPdfInNewTab(url)) {
      ADD_FAILURE() << "Failed to load PDF";
      return nullptr;
    }

    return pdf_extension_test_util::GetOnlyPdfPluginFrame(
        GetActiveWebContents());
  }
};

// Test that multiple tabs containing same-site PDFs don't share a process for
// the PDF content frame when under the process limit.
IN_PROC_BROWSER_TEST_P(PDFExtensionSameSiteProcessTest,
                       SameSitePdfContentFramesInSeparateProcesses) {
  const GURL same_pdf_url = embedded_test_server()->GetURL("/pdf/test.pdf");

  content::RenderFrameHost* content_host1 = LoadPdfGetContentHost(same_pdf_url);
  ASSERT_TRUE(content_host1);

  content::RenderFrameHost* content_host2 =
      LoadPdfInNewTabGetContentHost(same_pdf_url);
  ASSERT_TRUE(content_host2);

  // The content frames should be in separate processes.
  EXPECT_NE(content_host1, content_host2);
  EXPECT_NE(content_host1->GetProcess(), content_host2->GetProcess());
}

// Test that multiple tabs containing same-site PDFs share a process for the PDF
// content frame when at the process limit.
IN_PROC_BROWSER_TEST_P(PDFExtensionSameSiteProcessTest,
                       SameSitePdfContentFramesInSameProcess) {
  // Set the process limit to 1.
  content::RenderProcessHost::SetMaxRendererProcessCount(1);

  const GURL same_pdf_url = embedded_test_server()->GetURL("/pdf/test.pdf");

  content::RenderFrameHost* content_host1 = LoadPdfGetContentHost(same_pdf_url);
  ASSERT_TRUE(content_host1);

  content::RenderFrameHost* content_host2 =
      LoadPdfInNewTabGetContentHost(same_pdf_url);
  ASSERT_TRUE(content_host2);

  // The content frames should be in the same process.
  EXPECT_NE(content_host1, content_host2);
  EXPECT_EQ(content_host1->GetProcess(), content_host2->GetProcess());
}

class PDFExtensionZoomTest : public PDFExtensionTest {
 public:
  PDFExtensionZoomTest() = default;
  ~PDFExtensionZoomTest() override = default;

 protected:
  // Callers must set the default zoom level and load the PDF before calling
  // `TestDefaultZoom()`.
  void TestDefaultZoom(content::RenderFrameHost* extension_host) {
    WebContents* web_contents = GetActiveWebContents();
    auto* main_contents_zoom_controller =
        zoom::ZoomController::FromWebContents(web_contents);
    ASSERT_TRUE(main_contents_zoom_controller);

    // The PDF extension should not use the default zoom level and stay at 0
    // zoom level, since the PDF UI should not be affected by zoom.
    auto* extension_host_zoom_controller =
        UseOopif()
            ? zoom::ZoomController::FromWebContentsAndRenderFrameHost(
                  web_contents, extension_host->GetGlobalId())
            : zoom::ZoomController::FromWebContents(
                  content::WebContents::FromRenderFrameHost(extension_host));
    ASSERT_TRUE(extension_host_zoom_controller);
    EXPECT_NE(main_contents_zoom_controller, extension_host_zoom_controller);

    const double actual_zoom = extension_host_zoom_controller->GetZoomLevel();
    EXPECT_NE(main_contents_zoom_controller->GetZoomLevel(), actual_zoom);
    // A zoom level of 0 corresponds to a zoom factor of 1, or 100%.
    EXPECT_EQ(0, actual_zoom);
  }
};

IN_PROC_BROWSER_TEST_P(PDFExtensionZoomTest, DefaultZoomFullPage) {
  browser()->profile()->GetZoomLevelPrefs()->SetDefaultZoomLevelPref(0.5);

  content::RenderFrameHost* extension_host =
      LoadPdfGetExtensionHost(embedded_test_server()->GetURL("/pdf/test.pdf"));
  ASSERT_TRUE(extension_host);

  TestDefaultZoom(extension_host);
}

IN_PROC_BROWSER_TEST_P(PDFExtensionZoomTest, DefaultZoomEmbed) {
  browser()->profile()->GetZoomLevelPrefs()->SetDefaultZoomLevelPref(0.5);

  content::RenderFrameHost* extension_host =
      LoadPdfInFirstChildGetExtensionHost(
          embedded_test_server()->GetURL("/pdf/pdf_embed.html"));
  ASSERT_TRUE(extension_host);

  TestDefaultZoom(extension_host);
}

// PDF extension tests for the OOPIF PDF viewer.
class PDFExtensionOopifTest : public PDFExtensionTestWithoutOopifOverride {
 public:
  bool UseOopif() const override { return true; }

  pdf::PdfViewerStreamManager* GetPdfViewerStreamManager() {
    return pdf::PdfViewerStreamManager::FromWebContents(GetActiveWebContents());
  }
};

// Test that an embed-embedded PDF can send and receive postMessage() messages
// to and from its embedder.
IN_PROC_BROWSER_TEST_F(PDFExtensionOopifTest, OopifPdfPostMessageEmbed) {
  // Load the HTML containing an embed embedding a PDF.
  ASSERT_TRUE(ui_test_utils::NavigateToURL(
      browser(), embedded_test_server()->GetURL("/pdf/pdf_embed.html")));

  // `EnsurePDFHasLoaded()` uses postMessage() to check that the PDF has loaded,
  // so calling it is sufficient to check that a postMessage() connection has
  // been established.
  content::RenderFrameHost* embedder_host =
      ChildFrameAt(GetActiveWebContents()->GetPrimaryMainFrame(), 0);
  ASSERT_TRUE(embedder_host);
  ASSERT_TRUE(pdf_extension_test_util::EnsurePDFHasLoaded(embedder_host));
}

// Tests that `FindFullPagePdfExtensionHost` fails to find the PDF extension
// host on a non-PDF page.
IN_PROC_BROWSER_TEST_F(PDFExtensionOopifTest,
                       FindFullPagePdfExtensionHostNonPdf) {
  // Navigate to a non-PDF page.
  ASSERT_TRUE(ui_test_utils::NavigateToURL(
      browser(), embedded_test_server()->GetURL("/title1.html")));

  // Verify that there is no full-page pdf extension host on non-PDF page.
  EXPECT_FALSE(
      pdf_frame_util::FindFullPagePdfExtensionHost(GetActiveWebContents()));
}

// Tests that `FindFullPagePdfExtensionHost` fails to find the PDF extension
// host on an embedded PDF.
IN_PROC_BROWSER_TEST_F(PDFExtensionOopifTest,
                       FindFullPagePdfExtensionHostEmbedPdf) {
  // Load page with embedded PDF and make sure it succeeds.
  ASSERT_TRUE(LoadPdfInFirstChild(
      embedded_test_server()->GetURL("/pdf/pdf_embed.html")));

  // Verify that there is no full-page pdf extension host on embedded PDF.
  EXPECT_FALSE(
      pdf_frame_util::FindFullPagePdfExtensionHost(GetActiveWebContents()));
}

// Tests that `FindFullPagePdfExtensionHost` finds the correct PDF extension
// host on a full-page PDF.
IN_PROC_BROWSER_TEST_F(PDFExtensionOopifTest,
                       FindFullPagePdfExtensionHostFullPagePdf) {
  // Load a full-page PDF and make sure it succeeds.
  ASSERT_TRUE(ui_test_utils::NavigateToURL(
      browser(), embedded_test_server()->GetURL("/pdf/test.pdf")));
  auto* web_contents = GetActiveWebContents();
  ASSERT_TRUE(GetTestPdfViewerStreamManager(web_contents)
                  ->WaitUntilPdfLoaded(web_contents->GetPrimaryMainFrame()));

  content::RenderFrameHost* child_frame =
      content::ChildFrameAt(web_contents->GetPrimaryMainFrame(), 0);
  ASSERT_TRUE(child_frame);

  // Verify that `FindFullPagePdfExtensionHost` returns the correct frame.
  EXPECT_EQ(child_frame,
            pdf_frame_util::FindFullPagePdfExtensionHost(web_contents));
}

// Tests that `FindFullPagePdfExtensionHost` finds the correct PDF extension
// host on a full-page PDF loaded with MIME type params.
IN_PROC_BROWSER_TEST_F(
    PDFExtensionOopifTest,
    FindFullPagePdfExtensionHostFullPagePdfWithMimeTypeParam) {
  // Load a full-page PDF with MIME type param and make sure it succeeds.
  const char kPdfFullPageWithMimeTypeParam[] =
      "data:application/pdf;charset=iso-8859-5;base64,"
      "JVBERi0xLjcKJaDypPQKMSAwIG9iaiA8PAogIC9UeXBlIC9DYXRhbG9nCiAgL1BhZ2VzIDIg"
      "MCBSCj4+CmVuZG9iagoyIDAgb2JqIDw8CiAgL1R5cGUgL1BhZ2VzCiAgL0NvdW50IDEKICAv"
      "S2lkcyBbMyAwIFJdCiAgL1Jlc291cmNlcyA8PCA+Pgo+PgplbmRvYmoKMyAwIG9iaiA8PAog"
      "IC9UeXBlIC9QYWdlIAogIC9QYXJlbnQgMiAwIFIKICAvTWVkaWFCb3ggWzAgMCAxMDAgNTBd"
      "Cj4+CmVuZG9iagp4cmVmCjAgNAowMDAwMDAwMDAwIDY1NTM1IGYgCjAwMDAwMDAwMTUgMDAw"
      "MDAgbiAKMDAwMDAwMDA2OCAwMDAwMCBuIAowMDAwMDAwMTUwIDAwMDAwIG4gCnRyYWlsZXIg"
      "PDwKICAvUm9vdCAxIDAgUgogIC9TaXplIDQKPj4Kc3RhcnR4cmVmCjIyNwolJUVPRgo=";
  EXPECT_TRUE(LoadPdf(GURL(kPdfFullPageWithMimeTypeParam)));

  auto* web_contents = GetActiveWebContents();
  // Validate that the PDF page metadata is set correctly.
  EXPECT_EQ(pdf::kPDFMimeType, web_contents->GetContentsMimeType());
  EXPECT_EQ("ISO-8859-5", web_contents->GetEncoding());

  content::RenderFrameHost* child_frame =
      content::ChildFrameAt(web_contents->GetPrimaryMainFrame(), 0);
  ASSERT_TRUE(child_frame);

  // Verify that `FindFullPagePdfExtensionHost` returns the correct frame,
  // irrespective of MIME type params (Ex: charset in this test).
  EXPECT_EQ(child_frame,
            pdf_frame_util::FindFullPagePdfExtensionHost(web_contents));
}

// Test that re-navigating to the same PDF successfully loads the PDF.
IN_PROC_BROWSER_TEST_F(PDFExtensionOopifTest, NavigateToSamePdf) {
  const GURL pdf_url = embedded_test_server()->GetURL("/pdf/test.pdf");
  WebContents* web_contents = GetActiveWebContents();

  // Navigate to the PDF URL.
  ASSERT_TRUE(ui_test_utils::NavigateToURL(browser(), pdf_url));

  auto* primary_main_frame1 = web_contents->GetPrimaryMainFrame();
  ASSERT_TRUE(pdf_extension_test_util::EnsurePDFHasLoaded(
      web_contents->GetPrimaryMainFrame()));

  // Make sure the stream has the same URL as the PDF URL.
  ASSERT_TRUE(GetPdfViewerStreamManager());
  base::WeakPtr<extensions::StreamContainer> stream =
      GetPdfViewerStreamManager()->GetStreamContainer(primary_main_frame1);
  ASSERT_TRUE(stream);
  EXPECT_EQ(pdf_url, stream->original_url());

  // Navigate to the same PDF URL.
  ASSERT_TRUE(ui_test_utils::NavigateToURL(
      browser(), embedded_test_server()->GetURL("/pdf/test.pdf")));

  auto* primary_main_frame2 = web_contents->GetPrimaryMainFrame();
  ASSERT_TRUE(pdf_extension_test_util::EnsurePDFHasLoaded(primary_main_frame2));

  // Make sure the stream was replaced by a new stream. The new stream should
  // still have the same URL as the PDF URL.
  ASSERT_TRUE(GetPdfViewerStreamManager());
  EXPECT_FALSE(stream);
  stream = GetPdfViewerStreamManager()->GetStreamContainer(primary_main_frame2);
  ASSERT_TRUE(stream);
  EXPECT_EQ(pdf_url, stream->original_url());
}

// TODO(crbug.com/41495156): Add a test for reloading the same URL with a new
// Content-Security-Policy: sandbox header.

// Test that navigating to a different PDF successfully loads the PDF.
IN_PROC_BROWSER_TEST_F(PDFExtensionOopifTest, NavigateToDifferentPdf) {
  const GURL pdf_url = embedded_test_server()->GetURL("/pdf/test.pdf");
  WebContents* web_contents = GetActiveWebContents();

  // Navigate to the PDF URL.
  ASSERT_TRUE(ui_test_utils::NavigateToURL(browser(), pdf_url));

  ASSERT_TRUE(pdf_extension_test_util::EnsurePDFHasLoaded(
      web_contents->GetPrimaryMainFrame()));

  // Make sure the stream has the same URL as the PDF URL.
  ASSERT_TRUE(GetPdfViewerStreamManager());
  base::WeakPtr<extensions::StreamContainer> stream =
      GetPdfViewerStreamManager()->GetStreamContainer(
          web_contents->GetPrimaryMainFrame());
  ASSERT_TRUE(stream);
  EXPECT_EQ(pdf_url, stream->original_url());

  const GURL other_pdf_url =
      embedded_test_server()->GetURL("/pdf/test-title.pdf");

  // Navigate to a different PDF URL.
  ASSERT_TRUE(ui_test_utils::NavigateToURL(browser(), other_pdf_url));

  ASSERT_TRUE(pdf_extension_test_util::EnsurePDFHasLoaded(
      web_contents->GetPrimaryMainFrame()));

  // Make sure the stream was replaced by a new stream. The new stream should
  // have the new PDF URL.
  ASSERT_TRUE(GetPdfViewerStreamManager());
  EXPECT_FALSE(stream);
  stream = GetPdfViewerStreamManager()->GetStreamContainer(
      web_contents->GetPrimaryMainFrame());
  ASSERT_TRUE(stream);
  EXPECT_EQ(other_pdf_url, stream->original_url());
}

// Test that the inner frames in a full page PDF can't be accessed.
IN_PROC_BROWSER_TEST_F(PDFExtensionOopifTest, FailToAccessInnerFramesFullPage) {
  // Load a direct PDF URL full page.
  ASSERT_TRUE(LoadPdf(embedded_test_server()->GetURL("/pdf/test.pdf")));

  // Fail to access the inner frames using window.frames and the Document
  // interface.
  EXPECT_EQ(true, content::EvalJs(GetActiveWebContents(),
                                  "window.frames[0] === undefined"));
  EXPECT_EQ(true,
            content::EvalJs(
                GetActiveWebContents(),
                "document.getElementsByTagName('embed')[0] === undefined"));
}

// Test that the inner frames in an embed-embedded PDF can't be accessed.
IN_PROC_BROWSER_TEST_F(PDFExtensionOopifTest, FailToAccessInnerFramesEmbed) {
  // Load the HTML containing an embed embedding a PDF.
  ASSERT_TRUE(LoadPdfInFirstChild(
      embedded_test_server()->GetURL("/pdf/pdf_embed.html")));

  EXPECT_EQ(true, content::EvalJs(GetActiveWebContents(),
                                  kNestedWindowFramesUndefinedCheck));
}

// Test that the inner frames in an iframe-embedded PDF can't be accessed.
IN_PROC_BROWSER_TEST_F(PDFExtensionOopifTest, FailToAccessInnerFramesIframe) {
  // Load the HTML containing an iframe embedding a PDF.
  ASSERT_TRUE(LoadPdfInFirstChild(
      embedded_test_server()->GetURL("/pdf/test-iframe.html")));

  EXPECT_EQ(true, content::EvalJs(GetActiveWebContents(),
                                  kNestedWindowFramesUndefinedCheck));
}

// Tests that a data URL to a PDF loads successfully.
IN_PROC_BROWSER_TEST_F(PDFExtensionOopifTest, LoadDataUrlPdfFullPage) {
  // The data URL to load a simple PDF page.
  const char kDataUrlPdfFullPage[] =
      "data:application/pdf;base64,"
      "JVBERi0xLjcKJaDypPQKMSAwIG9iaiA8PAogIC9UeXBlIC9DYXRhbG9nCiAgL1BhZ2VzIDIg"
      "MCBSCj4+CmVuZG9iagoyIDAgb2JqIDw8CiAgL1R5cGUgL1BhZ2VzCiAgL0NvdW50IDEKICAv"
      "S2lkcyBbMyAwIFJdCiAgL1Jlc291cmNlcyA8PCA+Pgo+PgplbmRvYmoKMyAwIG9iaiA8PAog"
      "IC9UeXBlIC9QYWdlIAogIC9QYXJlbnQgMiAwIFIKICAvTWVkaWFCb3ggWzAgMCAxMDAgNTBd"
      "Cj4+CmVuZG9iagp4cmVmCjAgNAowMDAwMDAwMDAwIDY1NTM1IGYgCjAwMDAwMDAwMTUgMDAw"
      "MDAgbiAKMDAwMDAwMDA2OCAwMDAwMCBuIAowMDAwMDAwMTUwIDAwMDAwIG4gCnRyYWlsZXIg"
      "PDwKICAvUm9vdCAxIDAgUgogIC9TaXplIDQKPj4Kc3RhcnR4cmVmCjIyNwolJUVPRgo=";
  EXPECT_TRUE(LoadPdf(GURL(kDataUrlPdfFullPage)));
}

// Tests that a data URL to a HTML page embedding a PDF in an embed loads
// successfully.
IN_PROC_BROWSER_TEST_F(PDFExtensionOopifTest, LoadDataUrlPdfEmbed) {
  const std::string url =
      embedded_test_server()->GetURL("/pdf/test.pdf").spec();
  const std::string data_url =
      "data:text/html,"
      "<html><body>"
      "<embed type=\"application/pdf\" src=\"" +
      url +
      "\">"
      "</body></html>";
  EXPECT_TRUE(LoadPdfInFirstChild(GURL(data_url)));
}

// Tests that a data URL to a HTML page embedding a PDF in an iframe loads
// successfully.
IN_PROC_BROWSER_TEST_F(PDFExtensionOopifTest, LoadDataUrlPdfIframe) {
  const std::string url =
      embedded_test_server()->GetURL("/pdf/test.pdf").spec();
  const std::string data_url =
      "data:text/html,"
      "<html><body>"
      "<iframe type=\"application/pdf\" src=\"" +
      url +
      "\">"
      "</body></html>";
  EXPECT_TRUE(LoadPdfInFirstChild(GURL(data_url)));
}

// If the document.body of the PDF viewer is replaced, there should no longer
// be a PDF stream.
IN_PROC_BROWSER_TEST_F(PDFExtensionOopifTest, ReplaceDocumentBody) {
  ASSERT_TRUE(LoadPdf(embedded_test_server()->GetURL("/pdf/test.pdf")));
  EXPECT_TRUE(
      pdf::PdfViewerStreamManager::FromWebContents(GetActiveWebContents()));

  // Replace the document.body. The embedder RFH will stay, but the extension
  // and content RFH will be deleted.
  EXPECT_TRUE(
      content::ExecJs(GetActiveWebContents(),
                      "document.body = document.createElement('body');"));

  // The stream should no longer exist.
  EXPECT_FALSE(
      pdf::PdfViewerStreamManager::FromWebContents(GetActiveWebContents()));
}

// If the document.body of the PDF viewer is replaced, any subframes appended
// should be able to navigate.
IN_PROC_BROWSER_TEST_F(PDFExtensionOopifTest, ReplaceDocumentBodyWithIframe) {
  ASSERT_TRUE(LoadPdf(embedded_test_server()->GetURL("/pdf/test.pdf")));
  WebContents* contents = GetActiveWebContents();
  EXPECT_TRUE(pdf::PdfViewerStreamManager::FromWebContents(contents));

  // Replace the document.body.
  EXPECT_TRUE(content::ExecJs(
      contents,
      "let body = document.createElement('body');"
      "body.innerHTML = '<body><iframe id=\"test_iframe_id\"></iframe></body>';"
      "document.body = body;"));

  // The stream should no longer exist.
  EXPECT_FALSE(pdf::PdfViewerStreamManager::FromWebContents(contents));

  // The iframe should be able to navigate.
  content::TestNavigationObserver navigation_observer(contents);
  EXPECT_TRUE(content::NavigateIframeToURL(
      contents, "test_iframe_id",
      embedded_test_server()->GetURL("/empty.html")));

  EXPECT_TRUE(navigation_observer.last_navigation_succeeded());
}

// Subframes appended to the original document.body should be able to navigate.
IN_PROC_BROWSER_TEST_F(PDFExtensionOopifTest, DocumentBodyAppendIframe) {
  ASSERT_TRUE(LoadPdf(embedded_test_server()->GetURL("/pdf/test.pdf")));
  WebContents* contents = GetActiveWebContents();

  // Append an iframe to the document.body.
  EXPECT_TRUE(content::ExecJs(contents,
                              "let iframe = document.createElement('iframe');"
                              "iframe.id = 'test_iframe_id';"
                              "document.body.appendChild(iframe);"));

  // The iframe should be able to navigate.
  content::TestNavigationObserver navigation_observer(contents);
  EXPECT_TRUE(content::NavigateIframeToURL(
      contents, "test_iframe_id",
      embedded_test_server()->GetURL("/empty.html")));

  EXPECT_TRUE(navigation_observer.last_navigation_succeeded());
}

// Loading a PDF in a subframe without a corresponding FrameNavigationEntry
// should not cause a crash. See https://crbug.com/358084015 and
// https://crbug.com/40467594.
IN_PROC_BROWSER_TEST_F(PDFExtensionOopifTest, SubframePDFMissingFrameEntry) {
  WebContents* contents = GetActiveWebContents();

  // Navigate to a test page, and then navigate same-document.
  const GURL main_url(embedded_test_server()->GetURL("/title1.html"));
  const GURL same_doc_url(embedded_test_server()->GetURL("/title1.html#foo"));
  ASSERT_TRUE(ui_test_utils::NavigateToURL(browser(), main_url));
  content::TestNavigationObserver same_doc_observer(contents);
  EXPECT_TRUE(content::ExecJs(contents, "location.href='#foo';"));
  same_doc_observer.Wait();
  EXPECT_EQ(same_doc_url, contents->GetLastCommittedURL());

  // Append an iframe to the document.body.
  content::TestNavigationObserver iframe_observer(contents);
  EXPECT_TRUE(content::ExecJs(contents,
                              "let iframe = document.createElement('iframe');"
                              "iframe.src = 'title1.html';"
                              "document.body.appendChild(iframe);"));
  iframe_observer.Wait();

  // Go back to the previous same-document entry. There will be no
  // subframe FrameNavigationEntry even though the subframe continues to exist,
  // due to https://crbug.com/40467594.
  content::TestNavigationObserver back_observer(contents);
  contents->GetController().GoBack();
  back_observer.Wait();

  // Loading a PDF in the subframe at this point should not crash.
  content::TestNavigationObserver pdf_observer(contents);
  EXPECT_TRUE(
      content::ExecJs(contents, "frames[0].location.href='/pdf/test.pdf';"));
  pdf_observer.Wait();
  EXPECT_TRUE(EnsurePDFHasLoadedInFirstChildWithValidFrameTree(contents));
}

// Ensure that when the only other PDF instance closes in the middle of another
// PDF's extension frame load, the PDF extension frame can still complete its
// subsequent navigation. See https://crbug.com/1295431.
IN_PROC_BROWSER_TEST_F(PDFExtensionOopifTest,
                       PdfExtensionLoadedWhileOldPdfCloses) {
  const GURL main_url(embedded_test_server()->GetURL("/pdf/test.pdf"));

  // Load a test PDF in the first tab.
  content::RenderFrameHost* extension_host1 = LoadPdfGetExtensionHost(main_url);
  ASSERT_TRUE(extension_host1);
  auto* embedder_host1 = GetActiveWebContents()->GetPrimaryMainFrame();
  EXPECT_NE(embedder_host1, extension_host1);

  // Verify the extension loaded.
  const GURL extension_url(
      "chrome-extension://mhjfbmdgcfjbbpaeojofohoefgiehjai/index.html");
  EXPECT_EQ(extension_url, extension_host1->GetLastCommittedURL());
  EXPECT_EQ(main_url, embedder_host1->GetLastCommittedURL());

  // Open another tab and navigate it to a same-site non-PDF URL.
  ui_test_utils::TabAddedWaiter add_tab1(browser());
  chrome::NewTab(browser());
  add_tab1.Wait();
  ASSERT_EQ(2, browser()->tab_strip_model()->count());
  WebContents* web_contents2 =
      browser()->tab_strip_model()->GetWebContentsAt(1);
  ASSERT_EQ(web_contents2, GetActiveWebContents());
  const GURL non_pdf_url(embedded_test_server()->GetURL("/title1.html"));
  ASSERT_TRUE(ui_test_utils::NavigateToURL(browser(), non_pdf_url));

  // Set up a delay for the PDF extension load.
  CreateTestPdfViewerStreamManager(web_contents2);
  auto* test_pdf_viewer_stream_manager2 =
      GetTestPdfViewerStreamManager(web_contents2);
  test_pdf_viewer_stream_manager2->DelayNextPdfExtensionNavigation();

  // Navigate to the PDF URL. Pause before the PDF extension loads. Navigating
  // with `ui_test_utils::BROWSER_TEST_WAIT_FOR_LOAD_STOP` only waits for the
  // embedder frame to finish loading, but not the PDF extension frame.
  ui_test_utils::NavigateToURLWithDisposition(
      browser(), main_url, WindowOpenDisposition::CURRENT_TAB,
      ui_test_utils::BROWSER_TEST_WAIT_FOR_LOAD_STOP);
  content::RenderFrameHost* embedder_host2 =
      web_contents2->GetPrimaryMainFrame();
  test_pdf_viewer_stream_manager2->WaitUntilPdfExtensionNavigationStarted(
      embedder_host2);

  // Close the first tab, destroying the first PDF while the second PDF is in
  // the middle of initialization. Historically, with GuestView PDF in
  // https://crbug.com/1295431, the extension process exited here and caused a
  // crash when the second PDF resumed.
  ASSERT_EQ(2, browser()->tab_strip_model()->count());
  content::WebContentsDestroyedWatcher destroyed_watcher(
      browser()->tab_strip_model()->GetWebContentsAt(0));
  browser()->tab_strip_model()->CloseWebContentsAt(
      0, TabCloseTypes::CLOSE_USER_GESTURE);
  destroyed_watcher.Wait();
  ASSERT_EQ(1, browser()->tab_strip_model()->count());

  // Resume the PDF load and ensure the second PDF loads without crashing.
  test_pdf_viewer_stream_manager2->ResumePdfExtensionNavigation(embedder_host2);
  ASSERT_TRUE(
      test_pdf_viewer_stream_manager2->WaitUntilPdfLoaded(embedder_host2));

  content::RenderFrameHost* extension_host2 =
      pdf_extension_test_util::GetOnlyPdfExtensionHost(web_contents2);
  ASSERT_TRUE(extension_host2);

  // Verify the extension loaded.
  EXPECT_EQ(extension_url, extension_host2->GetLastCommittedURL());
  EXPECT_EQ(main_url, embedder_host2->GetLastCommittedURL());
}

// Test that the PDF embedder frame can't postMessage() to the PDF content
// frame. OOPIF PDF only, since GuestView PDF's embedder frame doesn't have a
// proxy host to the content frame.
IN_PROC_BROWSER_TEST_F(PDFExtensionOopifTest,
                       BlockPdfEmbedderFramePostMessageToContentFrame) {
  ASSERT_TRUE(LoadPdf(embedded_test_server()->GetURL("/pdf/test.pdf")));

  auto* web_contents = GetActiveWebContents();
  content::RenderFrameHost* embedder_host = web_contents->GetPrimaryMainFrame();
  content::RenderFrameHost* content_host =
      pdf_extension_test_util::GetOnlyPdfPluginFrame(web_contents);
  ASSERT_TRUE(content_host);

  // The `content::RenderFrameProxyHost` is normally hidden by shadow DOM, but a
  // compromised PDF embedder renderer could try to send a message event to the
  // proxy host. If that occurs, the process hosting the compromised PDF
  // embedder renderer should crash.
  base::HistogramTester histograms;
  content::RenderProcessHostWatcher crash_observer(
      embedder_host->GetProcess(),
      content::RenderProcessHostWatcher::WATCH_FOR_PROCESS_EXIT);

  blink::TransferableMessage message;
  message.sender_agent_cluster_id = base::UnguessableToken::Create();
  content::SimulateProxyHostPostMessage(embedder_host, content_host,
                                        blink::TransferableMessage());

  crash_observer.Wait();
  histograms.ExpectUniqueSample("Stability.BadMessageTerminated.Content", 319,
                                1);
}

// Exercise a race condition where the profile is destroyed in the middle of a
// PDF navigation and ensure that this doesn't crash.  Specifically,
// `PdfNavigationThrottle` intercepts PDF navigations to PDF stream URLs,
// cancels them, and posts a task to navigate to the original URL instead.
// Triggering profile destruction after this task is posted but before it runs
// has previously led to issues in https://crbug.com/1382761.
// See PDFExtensionTestWithoutOopifOverride.PdfNavigationDuringProfileShutdown
// for the GuestView PDF version.
IN_PROC_BROWSER_TEST_F(PDFExtensionOopifTest,
                       PdfNavigationDuringProfileShutdown) {
  // Open an Incognito window.
  Browser* incognito = CreateIncognitoBrowser();
  content::WebContents* incognito_contents =
      incognito->tab_strip_model()->GetActiveWebContents();

  // Create the `pdf::TestPdfViewerStreamManager` before the PDF navigation,
  // since the test needs to delay the PDF extension URL navigation.
  CreateTestPdfViewerStreamManager(incognito_contents);
  auto* test_pdf_viewer_stream_manager =
      GetTestPdfViewerStreamManager(incognito_contents);
  test_pdf_viewer_stream_manager->DelayNextPdfExtensionNavigation();

  // Navigate the Incognito window to a page with a PDF embedded in an iframe.
  content::TestNavigationObserver navigation_observer(incognito_contents);
  incognito_contents->GetController().LoadURL(
      embedded_test_server()->GetURL("/pdf/test-cross-site-iframe.html"),
      content::Referrer(), ui::PAGE_TRANSITION_TYPED, std::string());

  // Wait for the initial set of navigations to the page, the embedded PDF URL,
  // and the PDF extension's about:blank navigation. The PDF extension URL
  // navigation is delayed, so once the about:blank navigation finishes, the
  // test will proceed.
  navigation_observer.Wait();

  content::RenderFrameHost* embedder_host =
      content::ChildFrameAt(incognito_contents, 0);
  ASSERT_TRUE(embedder_host);

  // Look up the PDF stream URL to which the navigation will take place.
  base::WeakPtr<extensions::StreamContainer> stream =
      test_pdf_viewer_stream_manager->GetStreamContainer(embedder_host);
  EXPECT_TRUE(stream);
  GURL stream_url(stream->stream_url());

  // Resume the PDF extension URL navigation.
  test_pdf_viewer_stream_manager->ResumePdfExtensionNavigation(embedder_host);

  // Use TestNavigationManager to wait for first yield after running
  // DidStartNavigation throttles.  This should be precisely after the
  // navigation to the stream URL gets canceled and the task to start a new
  // navigation to the original URL is scheduled.
  {
    content::TestNavigationManager test_navigation_manager(incognito_contents,
                                                           stream_url);
    ASSERT_TRUE(
        test_navigation_manager.WaitForFirstYieldAfterDidStartNavigation());
  }

  // Now, close Incognito and destroy its profile.  This is subtle: simply
  // closing the Incognito window and waiting for browser destruction (e.g.,
  // with `ui_test_utils::WaitForBrowserToClose(incognito)`) will trigger
  // asynchronous profile destruction which will allow the PDF task to run
  // before profile destruction is complete, sidestepping the bug in
  // https://crbug.com/1382761.  Instead, use the hard shutdown/restart logic
  // similar to that in `BrowserCloseManager::CloseBrowsers()`, which is used
  // by `chrome::ExitIgnoreUnloadHandlers() and forces the `Browser` and its
  // profile shutdown to complete synchronously, but only on the Incognito
  // Browser object. Note that we can't just use
  // `chrome::ExitIgnoreUnloadHandlers()` here, as that shuts down all Browser
  // objects and the rest of the browser process and appears to be unsupported
  // in tests.
  chrome::CloseWindow(incognito);

  // The `content::WebContents` needs to be deleted before the browser can be
  // destroyed.
  incognito->tab_strip_model()->DetachAndDeleteWebContentsAt(0);

  BrowserView* incognito_view = static_cast<BrowserView*>(incognito->window());
  incognito_view->DestroyBrowser();

  // The test succeeds if it doesn't crash when the posted PDF task attempts to
  // run (the task should be canceled/ignored), so wait for this to happen.
  base::RunLoop().RunUntilIdle();
}

// Test that the PDF.LoadStatus2 metric is incremented only after the PDF fully
// loads.
IN_PROC_BROWSER_TEST_F(PDFExtensionOopifTest, MetricsPDFLoadStatusPartialLoad) {
  const char kPdfLoadStatusMetric[] = "PDF.LoadStatus2";
  base::HistogramTester histograms;

  histograms.ExpectBucketCount(kPdfLoadStatusMetric,
                               PDFLoadStatus::kLoadedFullPagePdfWithPdfium, 0);

  auto* web_contents = GetActiveWebContents();
  const GURL main_url(embedded_test_server()->GetURL("/pdf/combobox_form.pdf"));

  // Delay the PDF extension navigation.
  CreateTestPdfViewerStreamManager(web_contents);
  auto* test_pdf_viewer_stream_manager =
      GetTestPdfViewerStreamManager(web_contents);
  test_pdf_viewer_stream_manager->DelayNextPdfExtensionNavigation();

  // Navigate to the PDF URL and wait for the PDF extension navigation to start.
  ui_test_utils::NavigateToURLWithDisposition(
      browser(), main_url, WindowOpenDisposition::CURRENT_TAB,
      ui_test_utils::BROWSER_TEST_WAIT_FOR_LOAD_STOP);
  auto* primary_main_frame = web_contents->GetPrimaryMainFrame();
  test_pdf_viewer_stream_manager->WaitUntilPdfExtensionNavigationStarted(
      primary_main_frame);

  // The PDF.LoadStatus2 metric should not be incremented yet.
  histograms.ExpectBucketCount(kPdfLoadStatusMetric,
                               PDFLoadStatus::kLoadedFullPagePdfWithPdfium, 0);

  // Finish loading the PDF.
  test_pdf_viewer_stream_manager->ResumePdfExtensionNavigation(
      primary_main_frame);
  EXPECT_TRUE(
      test_pdf_viewer_stream_manager->WaitUntilPdfLoaded(primary_main_frame));

  // The PDF.LoadStatus2 metric should be incremented.
  histograms.ExpectBucketCount(kPdfLoadStatusMetric,
                               PDFLoadStatus::kLoadedFullPagePdfWithPdfium, 1);
}

// Test that loading a blob PDF inside an embedder page with strict CSP should
// still have styling.
IN_PROC_BROWSER_TEST_F(PDFExtensionOopifTest,
                       EmbedderCSPDoesNotBlockPdfIframeStyling) {
  const GURL main_url(
      embedded_test_server()->GetURL("/pdf/blob_pdf_iframe_csp.html"));
  ASSERT_TRUE(ui_test_utils::NavigateToURL(browser(), main_url));

  content::WebContents* web_contents = GetActiveWebContents();

  // Open the blob PDF in an iframe.
  content::TestNavigationObserver navigation_observer(web_contents);
  ASSERT_TRUE(content::ExecJs(web_contents->GetPrimaryMainFrame(),
                              "openBlobPdfInIframe()"));
  navigation_observer.Wait();
  ASSERT_TRUE(navigation_observer.last_navigation_succeeded());

  content::RenderFrameHost* embedder_host = ChildFrameAt(web_contents, 0);
  ASSERT_TRUE(GetTestPdfViewerStreamManager(web_contents)
                  ->WaitUntilPdfLoaded(embedder_host));

  // The PDF embedder CSS sets the margin to 0px. Without the CSS, the margin
  // would be 8px.
  std::string embedder_margin =
      content::EvalJs(
          embedder_host,
          "window.getComputedStyle(document.body).getPropertyValue('margin')")
          .ExtractString();
  // TODO(crbug.com/343754409): Margin should be 0px.
  EXPECT_EQ("8px", embedder_margin);
}

class PDFExtensionOopifBlockPdfFrameNavigationTest
    : public PDFExtensionOopifTest {
 public:
  // Override PDFExtensionTestBase::SetUpCommandLine() to enable
  // `features::kRenderDocument`, which requires a parameter.
  // TODO(crbug.com/40615943): Remove when RenderDocument reaches the subframe
  // level.
  void SetUpCommandLine(base::CommandLine* command_line) override {
    PDFExtensionTestBase::SetUpCommandLine(command_line);

    feature_list_.InitWithFeaturesAndParameters(
        /*enabled_features=*/{{chrome_pdf::features::kPdfOopif, {}},
                              {features::kRenderDocument,
                               {{"level", "subframe"}}}},
        /*disabled_features=*/{});
  }

  // Test that navigating to `url` fails in the extension host. If `url` is
  // empty, navigates to the same URL.
  void TestBlockNavigationInExtensionHost(const GURL& url) {
    content::RenderFrameHost* extension_host =
        pdf_extension_test_util::GetOnlyPdfExtensionHost(
            GetActiveWebContents());
    ASSERT_TRUE(extension_host);

    content::FrameTreeNodeId frame_tree_node_id =
        extension_host->GetFrameTreeNodeId();
    content::RenderFrameHost* embedder_host = extension_host->GetParent();

    // Navigate to `url`.
    content::TestFrameNavigationObserver extension_nav_observer(extension_host);
    ASSERT_TRUE(content::ExecJs(extension_host,
                                content::JsReplace("location = $1", url)));
    extension_nav_observer.Wait();

    EXPECT_FALSE(extension_nav_observer.last_navigation_succeeded());

    // `extension_host` should be deleted here. As replacement, a new
    // `content::RenderFrameHost` should be created with an error document.
    content::RenderFrameHost* error_host =
        content::ChildFrameAt(embedder_host, 0);
    ASSERT_TRUE(error_host);
    EXPECT_TRUE(error_host->IsErrorDocument());
    EXPECT_EQ(frame_tree_node_id, error_host->GetFrameTreeNodeId());

    // Attempting to navigate the extension host deletes the stream.
    EXPECT_FALSE(GetPdfViewerStreamManager());
  }

  // Test that navigating to `url` fails in the content host.  If `url` is
  // empty, navigates to the same URL.
  void TestBlockNavigationInContentHost(const GURL& url) {
    content::RenderFrameHost* content_host =
        pdf_extension_test_util::GetOnlyPdfPluginFrame(GetActiveWebContents());
    ASSERT_TRUE(content_host);

    content::FrameTreeNodeId frame_tree_node_id =
        content_host->GetFrameTreeNodeId();
    content::RenderFrameHost* extension_host = content_host->GetParent();

    // Navigate to `url`.
    content::TestFrameNavigationObserver content_nav_observer(content_host);
    ASSERT_TRUE(content::ExecJs(content_host,
                                content::JsReplace("location = $1", url)));
    content_nav_observer.Wait();

    EXPECT_FALSE(content_nav_observer.last_navigation_succeeded());

    // `content_host` should be deleted here. As replacement, a new
    // `content::RenderFrameHost` should be created with an error document.
    content::RenderFrameHost* error_host =
        content::ChildFrameAt(extension_host, 0);
    ASSERT_TRUE(error_host);
    EXPECT_TRUE(error_host->IsErrorDocument());
    EXPECT_EQ(frame_tree_node_id, error_host->GetFrameTreeNodeId());

    // Attempting to navigate the content host deletes the stream.
    EXPECT_FALSE(GetPdfViewerStreamManager());
  }

 private:
  base::test::ScopedFeatureList feature_list_;
};

// Test that navigations in the inner PDF frames fail if they aren't for PDF
// viewer setup in a full page PDF.
IN_PROC_BROWSER_TEST_F(PDFExtensionOopifBlockPdfFrameNavigationTest,
                       NonPdfNavigationFullPage) {
  // Load a direct PDF URL full page.
  const GURL pdf_url = embedded_test_server()->GetURL("/pdf/test.pdf");
  const GURL other_url = embedded_test_server()->GetURL("/simple.html");

  ASSERT_TRUE(LoadPdf(pdf_url));
  TestBlockNavigationInExtensionHost(other_url);

  ASSERT_TRUE(LoadPdf(pdf_url));
  TestBlockNavigationInContentHost(other_url);
}

// Test that navigations in the inner PDF frames fail if they aren't for PDF
// viewer setup in an embed-embedded PDF.
IN_PROC_BROWSER_TEST_F(PDFExtensionOopifBlockPdfFrameNavigationTest,
                       NonPdfNavigationEmbed) {
  // Load the HTML containing an embed embedding a PDF.
  const GURL url = embedded_test_server()->GetURL("/pdf/pdf_embed.html");
  const GURL other_url = embedded_test_server()->GetURL("/simple.html");

  ASSERT_TRUE(LoadPdfInFirstChild(url));
  TestBlockNavigationInExtensionHost(other_url);

  ASSERT_TRUE(LoadPdfInFirstChild(url));
  TestBlockNavigationInContentHost(other_url);
}

// Test that navigations in the inner PDF frames fail if they aren't for PDF
// viewer setup in an iframe-embedded PDF.
IN_PROC_BROWSER_TEST_F(PDFExtensionOopifBlockPdfFrameNavigationTest,
                       NonPdfNavigationIframe) {
  // Load the HTML containing an iframe embedding a PDF.
  const GURL url = embedded_test_server()->GetURL("/pdf/test-iframe.html");
  const GURL other_url = embedded_test_server()->GetURL("/simple.html");

  ASSERT_TRUE(LoadPdfInFirstChild(url));
  TestBlockNavigationInExtensionHost(other_url);

  ASSERT_TRUE(LoadPdfInFirstChild(url));
  TestBlockNavigationInContentHost(other_url);
}

// Test that after the PDF load in a full page PDF, the PDF extension frame
// cannot re-navigate to the PDF extension URL and the PDF content frame cannot
// re-navigate to the PDF URL.
IN_PROC_BROWSER_TEST_F(PDFExtensionOopifBlockPdfFrameNavigationTest,
                       SameUrlNavigationFullPage) {
  // Load a direct PDF URL full page.
  const GURL pdf_url = embedded_test_server()->GetURL("/pdf/test.pdf");

  // Using an empty `GURL` will trigger a navigation to the same URL.
  ASSERT_TRUE(LoadPdf(pdf_url));
  TestBlockNavigationInExtensionHost(GURL());

  ASSERT_TRUE(LoadPdf(pdf_url));
  TestBlockNavigationInContentHost(GURL());
}

// Test that after the PDF load in an embed-embedded PDF, the PDF extension
// frame cannot re-navigate to the PDF extension URL and the PDF content frame
// cannot re-navigate to the PDF URL.
IN_PROC_BROWSER_TEST_F(PDFExtensionOopifBlockPdfFrameNavigationTest,
                       SameUrlNavigationEmbed) {
  // Load the HTML containing an embed embedding a PDF.
  const GURL url = embedded_test_server()->GetURL("/pdf/pdf_embed.html");

  // Using an empty `GURL` will trigger a navigation to the same URL.
  ASSERT_TRUE(LoadPdfInFirstChild(url));
  TestBlockNavigationInExtensionHost(GURL());

  ASSERT_TRUE(LoadPdfInFirstChild(url));
  TestBlockNavigationInContentHost(GURL());
}

// Test that after the PDF load in an iframe-embedded PDF, the PDF extension
// frame cannot re-navigate to the PDF extension URL and the PDF content frame
// cannot re-navigate to the PDF URL.
IN_PROC_BROWSER_TEST_F(PDFExtensionOopifBlockPdfFrameNavigationTest,
                       SameUrlNavigationIframe) {
  // Load the HTML containing an iframe embedding a PDF.
  const GURL url = embedded_test_server()->GetURL("/pdf/test-iframe.html");

  // Using an empty `GURL` will trigger a navigation to the same URL.
  ASSERT_TRUE(LoadPdfInFirstChild(url));
  TestBlockNavigationInExtensionHost(GURL());

  ASSERT_TRUE(LoadPdfInFirstChild(url));
  TestBlockNavigationInContentHost(GURL());
}

// Test class that enables the RendererSideContentDecoding feature.
// Used to verify PDF loading behavior, especially with compressed content,
// when this feature is active.
class PDFExtensionTestWithRendererSideContentDecoding
    : public PDFExtensionTest {
 protected:
  std::vector<base::test::FeatureRefAndParams> GetEnabledFeatures()
      const override {
    auto enabled = PDFExtensionTest::GetEnabledFeatures();
    // Enable renderer-side content decoding.
    enabled.push_back({network::features::kRendererSideContentDecoding, {}});
    return enabled;
  }
};

// Verifies that a compressed (gzipped) PDF loads successfully when
// RendererSideContentDecoding is enabled. This tests the fix for
// ensuring plugin-loading payloads aren't mistakenly decoded by the renderer
// due to mishandled content encoding headers (crbug.com/417398061).
IN_PROC_BROWSER_TEST_P(PDFExtensionTestWithRendererSideContentDecoding,
                       CompressedPdf) {
  EXPECT_TRUE(LoadPdf(embedded_test_server()->GetURL("/pdf/test.pdf.gz")));
}

// TODO(crbug.com/40268279): Stop testing both modes after OOPIF PDF viewer
// launches.
INSTANTIATE_FEATURE_OVERRIDE_TEST_SUITE(PDFExtensionTest);
INSTANTIATE_FEATURE_OVERRIDE_TEST_SUITE(PDFExtensionBlobNavigationTest);
INSTANTIATE_FEATURE_OVERRIDE_TEST_SUITE(PDFPluginDisabledTest);
INSTANTIATE_FEATURE_OVERRIDE_TEST_SUITE(PDFExtensionTestWithPartialLoading);
INSTANTIATE_FEATURE_OVERRIDE_TEST_SUITE(PDFExtensionScrollTest);
INSTANTIATE_FEATURE_OVERRIDE_TEST_SUITE(PDFExtensionLinkClickTest);
INSTANTIATE_FEATURE_OVERRIDE_TEST_SUITE(PDFExtensionInternalLinkClickTest);
INSTANTIATE_FEATURE_OVERRIDE_TEST_SUITE(PDFExtensionSaveTest);
INSTANTIATE_FEATURE_OVERRIDE_TEST_SUITE(PDFExtensionSaveWithPolicyTest);
INSTANTIATE_FEATURE_OVERRIDE_TEST_SUITE(PDFExtensionClipboardTest);
INSTANTIATE_FEATURE_OVERRIDE_TEST_SUITE(PDFExtensionHitTestTest);
INSTANTIATE_FEATURE_OVERRIDE_TEST_SUITE(PDFExtensionPrerenderTest);
INSTANTIATE_FEATURE_OVERRIDE_TEST_SUITE(PDFExtensionSubmitFormTest);
INSTANTIATE_FEATURE_OVERRIDE_TEST_SUITE(
    PDFExtensionPrerenderAndFencedFrameTest);
INSTANTIATE_FEATURE_OVERRIDE_TEST_SUITE(PDFExtensionIncognitoTest);
INSTANTIATE_FEATURE_OVERRIDE_TEST_SUITE(PDFExtensionSameSiteProcessTest);
INSTANTIATE_FEATURE_OVERRIDE_TEST_SUITE(PDFExtensionZoomTest);
INSTANTIATE_FEATURE_OVERRIDE_TEST_SUITE(
    PDFExtensionTestWithRendererSideContentDecoding);