1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
|
<!DOCTYPE html>
<!-- DO NOT EDIT! This test has been generated by tools/gentest.py. -->
<title>Canvas test: security.pattern.canvas.fillStyle.cross</title>
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
<script src="/common/get-host-info.sub.js"></script>
<script src="/common/media.js"></script>
<script src="/html/canvas/resources/canvas-tests.js"></script>
<body>
<p class="desc">Setting fillStyle to a pattern of an unclean canvas makes the canvas origin-unclean</p>
<script>
forEachCanvasSource(get_host_info().HTTP_REMOTE_ORIGIN,
get_host_info().HTTP_ORIGIN,
(name, factory) => {
promise_test(_ => {
return factory().then(source => {
const canvas = document.createElement('canvas');
const ctx = canvas.getContext('2d');
const pattern = ctx.createPattern(source, 'repeat');
ctx.fillStyle = pattern;
ctx.fillStyle = 'red';
assert_throws_dom("SECURITY_ERR", function() { canvas.toDataURL(); });
assert_throws_dom("SECURITY_ERR", function() { ctx.getImageData(0, 0, 1, 1); });
});
}, `${name}: Setting fillStyle to an origin-unclean pattern makes the canvas origin-unclean`);
});
forEachCanvasSource(get_host_info().HTTP_REMOTE_ORIGIN,
get_host_info().HTTP_ORIGIN,
(name, factory) => {
promise_test(_ => {
return factory().then(source => {
const pattern = new OffscreenCanvas(10, 10)
.getContext('2d')
.createPattern(source, 'repeat');
const canvas = document.createElement('canvas');
const ctx = canvas.getContext('2d');
ctx.fillStyle = pattern;
ctx.fillStyle = 'red';
assert_throws_dom("SECURITY_ERR", function() { canvas.toDataURL(); });
assert_throws_dom("SECURITY_ERR", function() { ctx.getImageData(0, 0, 1, 1); });
});
}, `${name}: Setting fillStyle to an origin-unclean offscreen canvas pattern makes the canvas origin-unclean`);
});
</script>
|
