File: lock-sandboxed-iframe.html

package info (click to toggle)
firefox-esr 140.4.0esr-1~deb13u1
  • links: PTS, VCS
  • area: main
  • in suites: trixie
  • size: 4,539,284 kB
  • sloc: cpp: 7,381,286; javascript: 6,388,710; ansic: 3,710,139; python: 1,393,780; xml: 628,165; asm: 426,916; java: 184,004; sh: 65,742; makefile: 19,302; objc: 13,059; perl: 12,912; yacc: 4,583; cs: 3,846; pascal: 3,352; lex: 1,720; ruby: 1,226; exp: 762; php: 436; lisp: 258; awk: 247; sql: 66; sed: 54; csh: 10
file content (63 lines) | stat: -rw-r--r-- 1,947 bytes parent folder | download | duplicates (15)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
<!DOCTYPE html>
<meta charset="utf-8" />
<meta viewport="width=device-width, initial-scale=1" />
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
<script src="/resources/testdriver.js"></script>
<script src="/resources/testdriver-vendor.js"></script>
<script type="module">
  import {
    attachIframe
  } from "./resources/orientation-utils.js";

  function wait_result() {
    return new Promise((resolve) => {
      function callback(evt) {
        switch (evt.data.result) {
          case "locked":
            resolve(evt.data.orientation);
            break;
          case "errored":
            resolve(evt.data);
            break;
          default:
            assert_unreached(`Unexpected message: ${evt.data.result}`);
            return;
        }
        window.removeEventListener("message", callback);
      }
      window.addEventListener("message", callback);
    });
  }

  promise_test(async (t) => {
    const iframe = await attachIframe({
      src: "resources/sandboxed-iframe-locking.html",
      sandbox: "allow-scripts allow-same-origin",
    });
    const message = await wait_result();
    assert_equals(
      message.lock_name,
      "SecurityError",
      "screen.lockOrientation() throws a SecurityError"
    );
    assert_equals(
      message.unlock_name,
      "SecurityError",
      "screen.orientation.unlock() throws a SecurityError"
    );
  }, "Test without 'allow-orientation-lock' sandboxing directive");

  promise_test(async (t) => {
    const iframe = await attachIframe({
      src: "resources/sandboxed-iframe-locking.html",
      sandbox: "allow-scripts allow-same-origin allow-orientation-lock",
    });
    const message = await wait_result();
    assert_equals(
      message,
      "portrait-primary",
      "screen.orientation lock to portrait-primary"
    );
  }, "Test with 'allow-orientation-lock' sandboxing directive");
</script>