embedding.tentative.https.window.js (3710B)
1 // META: variant=?1-1 2 // META: variant=?2-2 3 // META: variant=?3-3 4 // META: variant=?4-4 5 // META: variant=?5-5 6 // META: variant=?6-6 7 // META: variant=?7-7 8 // META: variant=?8-8 9 // META: variant=?9-9 10 // META: variant=?10-10 11 // META: variant=?11-11 12 // META: variant=?12-12 13 // META: variant=?13-last 14 // META: timeout=long 15 // META: script=/common/get-host-info.sub.js 16 // META: script=/common/utils.js 17 // META: script=/common/subset-tests.js 18 // META: script=/common/dispatcher/dispatcher.js 19 // META: script=/html/cross-origin-embedder-policy/credentialless/resources/common.js 20 // META: script=./resources/common.js 21 // META: script=./resources/embedding-test.js 22 23 const {REMOTE_ORIGIN} = get_host_info(); 24 25 // variant = 1 26 subsetTest(embeddingTest, 27 "Parent embeds same-origin credentialless iframe", { 28 expectation: EXPECT_LOAD, 29 }); 30 31 // variant = 2 32 subsetTest(embeddingTest, 33 "Parent embeds cross-origin credentialless iframe", { 34 child_origin: REMOTE_ORIGIN, 35 expectation: EXPECT_LOAD, 36 }); 37 38 // variant = 3 39 subsetTest(embeddingTest, 40 "COEP:require-corp parent embeds same-origin credentialless iframe", { 41 parent_headers: coep_require_corp, 42 expectation: EXPECT_LOAD, 43 }); 44 45 // variant = 4 46 subsetTest(embeddingTest, 47 "COEP:require-corp parent embeds cross-origin credentialless iframe", { 48 parent_headers: coep_require_corp, 49 child_origin: REMOTE_ORIGIN, 50 expectation: EXPECT_LOAD, 51 }); 52 53 // variant = 5 54 subsetTest(embeddingTest, 55 "COEP:credentialless parent embeds same-origin credentialless iframe", { 56 parent_headers: coep_credentialless, 57 expectation: EXPECT_LOAD, 58 }); 59 60 // variant = 6 61 subsetTest(embeddingTest, 62 "COEP:credentialless parent embeds cross-origin credentialless iframe", { 63 parent_headers: coep_credentialless, 64 child_origin: REMOTE_ORIGIN, 65 expectation: EXPECT_LOAD, 66 }); 67 68 // variant = 7 69 // Regression test for https://crbug.com/1314369 70 subsetTest(embeddingTest, 71 "COOP:same-origin + COEP:require-corp embeds same-origin credentialless iframe", { 72 parent_headers: coop_same_origin + coep_require_corp, 73 expectation: EXPECT_LOAD, 74 }); 75 76 // variant = 8 77 // Regression test for https://crbug.com/1314369 78 subsetTest(embeddingTest, 79 "COOP:same-origin + COEP:require-corp embeds cross-origin credentialless iframe", { 80 parent_headers: coop_same_origin + coep_require_corp, 81 child_origin: REMOTE_ORIGIN, 82 expectation: EXPECT_LOAD, 83 }); 84 85 // variant = 9 86 // Regression test for https://crbug.com/1314369 87 subsetTest(embeddingTest, 88 "COOP:same-origin + COEP:credentialless embeds same-origin credentialless iframe", { 89 parent_headers: coop_same_origin + coep_credentialless, 90 expectation: EXPECT_LOAD, 91 }); 92 93 // variant = 10 94 // Regression test for https://crbug.com/1314369 95 subsetTest(embeddingTest, 96 "COOP:same-origin + COEP:credentialless embeds cross-origin credentialless iframe", { 97 parent_headers: coop_same_origin + coep_credentialless, 98 child_origin: REMOTE_ORIGIN, 99 expectation: EXPECT_LOAD, 100 }); 101 102 // variant = 11 103 subsetTest(embeddingTest, 104 "Parents embeds a CSP:frame-ancestors credentialless iframe", { 105 child_headers: "|header(Content-Security-Policy,frame-ancestors 'none')", 106 expectation: EXPECT_BLOCK, 107 }); 108 109 // variant = 12 110 subsetTest(embeddingTest, 111 "Cross-Origin-Isolated parent embeds same-origin COEP credentialless iframe", { 112 parent_headers: coop_same_origin + coep_require_corp, 113 child_headers: coop_same_origin + coep_require_corp, 114 expectation: EXPECT_LOAD, 115 }); 116 117 // variant = 13 118 subsetTest(embeddingTest, 119 "Cross-Origin-Isolated parent embeds cross-origin COEP credentialless iframe", { 120 parent_headers: coop_same_origin + coep_require_corp, 121 child_headers: coop_same_origin + coep_require_corp, 122 child_origin: REMOTE_ORIGIN, 123 expectation: EXPECT_LOAD, 124 });