1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
|
<!doctype html>
<meta charset="utf-8">
<script src="/cookies/resources/cookie-helper.sub.js"></script>
<script src="/resources/testdriver.js"></script>
<script src="/resources/testdriver-vendor.js"></script>
<script src="/resources/testharness.js"></script>
<!-- no testharnessreport.js -->
<script src="/storage-access-api/helpers.js"></script>
<script>
'use strict';
(async function() {
test_driver.set_test_context(window.top);
const testPrefix = 'sandboxed-iframe-allow-storage-access-by-user-activation';
test(() => {
let iframe = document.createElement('iframe');
assert_true(
iframe.sandbox.supports('allow-storage-access-by-user-activation'),
'`allow-storage-access-by-user-activation`' +
'sandbox attribute should be supported');
}, '`allow-storage-access-by-user-activation` sandbox attribute is supported');
// Ideally this would check whether the user-activation condition changes
// the behavior; however, due to limitations in the test driver, the
// 'prompt' permission state is effectively the same as 'denied' from the
// perspective of platform tests.
promise_test(async t => {
t.add_cleanup(async () => {
await test_driver.set_permission({name: 'storage-access'}, 'prompt');
});
await SetFirstPartyCookie(location.origin, "initial-cookie=unpartitioned;Secure;SameSite=None;Path=/");
await test_driver.set_permission({name: 'storage-access'}, 'granted');
await MaybeSetStorageAccess('*', '*', 'blocked');
await document.requestStorageAccess();
assert_true(
await CanAccessCookiesViaHTTP(),
'After obtaining storage access, subresource requests from the frame should send and set cookies.');
assert_true(
CanAccessCookiesViaJS(),
'After obtaining storage access, scripts in the frame should be able to access cookies.');
}, `[${testPrefix}] document.requestStorageAccess() should resolve even without a user gesture when already granted.`);
promise_test(async t => {
t.add_cleanup(async () => {
await test_driver.set_permission({name: 'storage-access'}, 'prompt');
});
await SetFirstPartyCookie(location.origin, "initial-cookie=unpartitioned;Secure;SameSite=None;Path=/");
await test_driver.set_permission({name: 'storage-access'}, 'granted');
await MaybeSetStorageAccess('*', '*', 'blocked');
await RunCallbackWithGesture(async () => {
await document.requestStorageAccess();
});
assert_true(
await CanAccessCookiesViaHTTP(),
'After obtaining storage access, subresource requests from the frame should send and set cookies.');
assert_true(
CanAccessCookiesViaJS(),
'After obtaining storage access, scripts in the frame should be able to access cookies.');
}, `[${testPrefix}] document.requestStorageAccess() should resolve with a user gesture`);
})();
</script>
|
