shared-storage-writable-iframe-request-in-data-url.tentative.https.sub.html (2458B)
1 <!doctype html> 2 <body> 3 <script src=/resources/testharness.js></script> 4 <script src=/resources/testharnessreport.js></script> 5 <script src=/common/utils.js></script> 6 <script src=/fenced-frame/resources/utils.js></script> 7 <script src=/shared-storage/resources/util.js></script> 8 <script> 9 'use strict'; 10 const origin = window.location.origin; 11 const rawSetHeader = 'set;key=hello;value=world'; 12 const setHeader = encodeURIComponent(rawSetHeader); 13 14 promise_test(async t => { 15 let frame = document.createElement('iframe'); 16 const promise = new Promise((resolve, reject) => { 17 window.addEventListener('message', async function handler(evt) { 18 if (evt.source === frame.contentWindow && 19 evt.data.sharedStorageWritableHeader) { 20 document.body.removeChild(frame); 21 window.removeEventListener('message', handler); 22 resolve(evt.data.sharedStorageWritableHeader); 23 } 24 }); 25 window.addEventListener('error', (error) => { 26 reject(error); 27 }); 28 }); 29 30 const innerUrl = 31 `${origin}\\/shared-storage\\/resources\\/shared-storage-write-` 32 + `notify-parent.py?write=${setHeader}`; 33 const innerCode = ` 34 let parentOrOpener = window.opener || window.parent; 35 let innerFrame = document.createElement('iframe'); 36 window.addEventListener('message', async (evt) => { 37 if (evt.source === innerFrame.contentWindow && 38 evt.data.sharedStorageWritableHeader) { 39 parentOrOpener.postMessage({sharedStorageWritableHeader: 40 evt.data.sharedStorageWritableHeader}, '*'); 41 } 42 }); 43 window.addEventListener('error', (error) => { 44 parentOrOpener.postMessage({sharedStorageWritableHeader: error.message}, '*'); 45 }); 46 innerFrame.src = '${innerUrl}'; 47 innerFrame.sharedStorageWritable = true; 48 document.body.appendChild(innerFrame); 49 `; 50 51 const dataURL = 'data:text/html;base64,' 52 + btoa(unescape('%3Chtml%3E%3Cbody%3E%3Cscript%3E' 53 + encodeURIComponent(innerCode) + 54 '%3C%2Fscript%3E%3C%2Fbody%3E%3C%2Fhtml%3E')); 55 frame.src = dataURL; 56 document.body.appendChild(frame); 57 58 const result = await promise; 59 assert_equals(result, "NO_SHARED_STORAGE_WRITABLE_HEADER"); 60 await verifyKeyNotFoundForOrigin('hello', origin); 61 62 }, 'shared storage iframe request disallowed in opaque origin from data URL'); 63 </script> 64 </body>