| // Copyright 2017 The Chromium Authors. All rights reserved. |
| // Use of this source code is governed by a BSD-style license that can be |
| // found in the LICENSE file. |
| |
| #include "chrome/browser/ui/views/payments/payment_request_browsertest_base.h" |
| #include "content/public/test/browser_test.h" |
| #include "content/public/test/browser_test_utils.h" |
| #include "testing/gtest/include/gtest/gtest.h" |
| |
| namespace payments { |
| |
| class PaymentRequestDataUrlTest : public PaymentRequestBrowserTestBase { |
| protected: |
| PaymentRequestDataUrlTest() {} |
| }; |
| |
| IN_PROC_BROWSER_TEST_F(PaymentRequestDataUrlTest, SecurityError) { |
| NavigateTo( |
| "data:text/html,<html><head><meta name=\"viewport\" " |
| "content=\"width=device-width, initial-scale=1, " |
| "maximum-scale=1\"></head><body><button id=\"buy\" onclick=\"try { " |
| "(new PaymentRequest([{supportedMethods: ['basic-card']}], {total: " |
| "{label: 'Total', amount: {currency: 'USD', value: " |
| "'1.00'}}})).show(); } catch(e) { " |
| "document.getElementById('result').innerHTML = e; }\">Data URL " |
| "Test</button><div id='result'></div></body></html>"); |
| |
| // PaymentRequest should not be defined in non-secure context. |
| bool result = true; |
| ASSERT_TRUE(content::ExecuteScriptAndExtractBool( |
| GetActiveWebContents(), |
| "window.domAutomationController.send('PaymentRequest' in window);", |
| &result)); |
| ASSERT_FALSE(result); |
| |
| ASSERT_TRUE(content::ExecuteScript( |
| GetActiveWebContents(), |
| "(function() { document.getElementById('buy').click(); })();")); |
| ExpectBodyContains({"PaymentRequest is not defined"}); |
| } |
| |
| } // namespace payments |
