tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

embedding.tentative.https.window.js (3710B)


      1 // META: variant=?1-1
      2 // META: variant=?2-2
      3 // META: variant=?3-3
      4 // META: variant=?4-4
      5 // META: variant=?5-5
      6 // META: variant=?6-6
      7 // META: variant=?7-7
      8 // META: variant=?8-8
      9 // META: variant=?9-9
     10 // META: variant=?10-10
     11 // META: variant=?11-11
     12 // META: variant=?12-12
     13 // META: variant=?13-last
     14 // META: timeout=long
     15 // META: script=/common/get-host-info.sub.js
     16 // META: script=/common/utils.js
     17 // META: script=/common/subset-tests.js
     18 // META: script=/common/dispatcher/dispatcher.js
     19 // META: script=/html/cross-origin-embedder-policy/credentialless/resources/common.js
     20 // META: script=./resources/common.js
     21 // META: script=./resources/embedding-test.js
     22 
     23 const {REMOTE_ORIGIN} = get_host_info();
     24 
     25 // variant = 1
     26 subsetTest(embeddingTest,
     27  "Parent embeds same-origin credentialless iframe", {
     28  expectation: EXPECT_LOAD,
     29 });
     30 
     31 // variant = 2
     32 subsetTest(embeddingTest,
     33  "Parent embeds cross-origin credentialless iframe", {
     34  child_origin: REMOTE_ORIGIN,
     35  expectation: EXPECT_LOAD,
     36 });
     37 
     38 // variant = 3
     39 subsetTest(embeddingTest,
     40  "COEP:require-corp parent embeds same-origin credentialless iframe", {
     41  parent_headers: coep_require_corp,
     42  expectation: EXPECT_LOAD,
     43 });
     44 
     45 // variant = 4
     46 subsetTest(embeddingTest,
     47  "COEP:require-corp parent embeds cross-origin credentialless iframe", {
     48  parent_headers: coep_require_corp,
     49  child_origin: REMOTE_ORIGIN,
     50  expectation: EXPECT_LOAD,
     51 });
     52 
     53 // variant = 5
     54 subsetTest(embeddingTest,
     55  "COEP:credentialless parent embeds same-origin credentialless iframe", {
     56  parent_headers: coep_credentialless,
     57  expectation: EXPECT_LOAD,
     58 });
     59 
     60 // variant = 6
     61 subsetTest(embeddingTest,
     62  "COEP:credentialless parent embeds cross-origin credentialless iframe", {
     63  parent_headers: coep_credentialless,
     64  child_origin: REMOTE_ORIGIN,
     65  expectation: EXPECT_LOAD,
     66 });
     67 
     68 // variant = 7
     69 // Regression test for https://crbug.com/1314369
     70 subsetTest(embeddingTest,
     71  "COOP:same-origin + COEP:require-corp embeds same-origin credentialless iframe", {
     72  parent_headers: coop_same_origin + coep_require_corp,
     73  expectation: EXPECT_LOAD,
     74 });
     75 
     76 // variant = 8
     77 // Regression test for https://crbug.com/1314369
     78 subsetTest(embeddingTest,
     79  "COOP:same-origin + COEP:require-corp embeds cross-origin credentialless iframe", {
     80  parent_headers: coop_same_origin + coep_require_corp,
     81  child_origin: REMOTE_ORIGIN,
     82  expectation: EXPECT_LOAD,
     83 });
     84 
     85 // variant = 9
     86 // Regression test for https://crbug.com/1314369
     87 subsetTest(embeddingTest,
     88  "COOP:same-origin + COEP:credentialless embeds same-origin credentialless iframe", {
     89  parent_headers: coop_same_origin + coep_credentialless,
     90  expectation: EXPECT_LOAD,
     91 });
     92 
     93 // variant = 10
     94 // Regression test for https://crbug.com/1314369
     95 subsetTest(embeddingTest,
     96  "COOP:same-origin + COEP:credentialless embeds cross-origin credentialless iframe", {
     97  parent_headers: coop_same_origin + coep_credentialless,
     98  child_origin: REMOTE_ORIGIN,
     99  expectation: EXPECT_LOAD,
    100 });
    101 
    102 // variant = 11
    103 subsetTest(embeddingTest,
    104  "Parents embeds a CSP:frame-ancestors credentialless iframe", {
    105  child_headers: "|header(Content-Security-Policy,frame-ancestors 'none')",
    106  expectation: EXPECT_BLOCK,
    107 });
    108 
    109 // variant = 12
    110 subsetTest(embeddingTest,
    111  "Cross-Origin-Isolated parent embeds same-origin COEP credentialless iframe", {
    112  parent_headers: coop_same_origin + coep_require_corp,
    113  child_headers: coop_same_origin + coep_require_corp,
    114  expectation: EXPECT_LOAD,
    115 });
    116 
    117 // variant = 13
    118 subsetTest(embeddingTest,
    119  "Cross-Origin-Isolated parent embeds cross-origin COEP credentialless iframe", {
    120  parent_headers: coop_same_origin + coep_require_corp,
    121  child_headers: coop_same_origin + coep_require_corp,
    122  child_origin: REMOTE_ORIGIN,
    123  expectation: EXPECT_LOAD,
    124 });