1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
|
<!doctype html>
<body>
<script src=/resources/testharness.js></script>
<script src=/resources/testharnessreport.js></script>
<script src=/permissions-policy/resources/permissions-policy.js></script>
<script src="/shared-storage/resources/util.js"></script>
<script>
'use strict';
const same_origin_src = '/shared-storage/resources/select-url-permissions-policy-helper.html';
const same_origin_script = '/shared-storage/resources/simple-module.js';
const cross_origin = 'https://{{domains[www]}}:{{ports[https][0]}}';
const cross_origin_src = cross_origin + same_origin_src;
const cross_origin_script = cross_origin + same_origin_script;
const header = 'permissions policy header shared-storage-select-url=(self)';
promise_test(async t => {
await sharedStorage.worklet.addModule(same_origin_script);
const allowed = await IsSharedStorageSelectUrlAllowed();
assert_true(allowed);
}, header + ' allows sharedStorage.selectURL() in the current page.');
promise_test(async t => {
const worklet = await sharedStorage.createWorklet(
same_origin_script,
{ credentials: "omit" });
await worklet.selectURL("operation", [{url: "1.html"}]);
}, header + ' allows selectURL() on a same-origin worklet');
promise_test(async t => {
const worklet = await sharedStorage.createWorklet(
cross_origin_script,
{ credentials: "omit", dataOrigin: "script-origin" });
return promise_rejects_dom(t, "InvalidAccessError",
worklet.selectURL("operation", [{url: "1.html"}]));
}, header + ' disallows selectURL() on a cross-origin worklet');
async_test(t => {
test_feature_availability('shared-storage-select-url', t, same_origin_src,
expect_feature_available_default);
}, header + ' allows sharedStorage.selectURL() in same-origin iframes.');
async_test(t => {
test_feature_availability('shared-storage-select-url', t, cross_origin_src,
expect_feature_unavailable_default);
}, header + ' disallows sharedStorage.selectURL() in cross-origin iframes.');
</script>
</body>
|
