permissions-policy-header-policy-allowed-for-self.https.sub.html (1777B)
1 <!DOCTYPE html> 2 <body> 3 <script src=/resources/testharness.js></script> 4 <script src=/resources/testharnessreport.js></script> 5 <script src=/permissions-policy/resources/permissions-policy.js></script> 6 <!-- Permissions-Policy: fullscreen=self; --> 7 <script> 8 'use strict'; 9 var same_origin = 'https://{{domains[]}}:{{ports[https][0]}}'; 10 var cross_origin = 'https://{{domains[www]}}:{{ports[https][0]}}'; 11 var same_origin_src = '/permissions-policy/resources/permissions-policy-allowedfeatures.html'; 12 var cross_origin_src = cross_origin + same_origin_src; 13 var header_policy = 'Permissions-Policy: fullscreen=self'; 14 15 // Test that fullscreen's allowlist is ['same_origin'] 16 test(function() { 17 assert_array_equals( 18 document.featurePolicy.getAllowlistForFeature('fullscreen'), 19 [same_origin]); 20 }, header_policy + ' -- test allowlist is [same_origin]'); 21 22 // Test that fullscreen is only allowed on same-origin subframe. 23 test_allowed_feature_for_subframe( 24 header_policy + ' -- test fullscreen is allowed on same-origin subframe', 25 'fullscreen', 26 same_origin_src); 27 test_disallowed_feature_for_subframe( 28 header_policy + ' -- test fullscreen is disallowed on cross-origin subframe', 29 'fullscreen', 30 cross_origin_src); 31 32 // Dynamically update sub frame's container policy 33 var allow = "fullscreen 'src';" 34 test_allowed_feature_for_subframe( 35 header_policy + ', iframe.allow = ' + allow + ' -- test fullscreen is allowed on same-origin subframe', 36 'fullscreen', 37 same_origin_src, 38 allow); 39 test_disallowed_feature_for_subframe( 40 header_policy + ', iframe.allow = ' + allow + ' -- test fullscreen is disallowed on cross-origin subframe', 41 'fullscreen', 42 cross_origin_src, 43 allow); 44 </script> 45 </body>