blob: 5402976b8df5f861ae906ce1e21e1cf0debb65fe [file] [log] [blame]
<?php
// Copyright 2016 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// This test tests that the JavaScript exposure of feature policy in the main
// document works via the following methods:
// allowsFeature(feature)
// -- if |feature| is allowed on the origin of the document.
// allowsFeature(feature, origin)
// -- if |feature| is allowed on the given origin.
// allowedFeatures()
// -- a list of features that are enabled on the origin of the
// document.
// getAllowlistForFeatureForFeature(feature)
// -- a list of explicitly named origins where the given feature is
// enabled, or
// ['*'] if the feature is enabled on all origins.
Header("Feature-Policy: fullscreen *; payment 'self'; midi 'none'; camera 'self' https://www.example.com https://www.example.net");
?>
<!DOCTYPE html>
<script src="../../resources/testharness.js"></script>
<script src="../../resources/testharnessreport.js"></script>
<script>
var policy_main = document.policy;
var allowed_features = ["fullscreen", "payment", "camera"];
var disallowed_features = ["badfeature", "midi"];
// Tests for policy.allowsFeature().
for (var feature of allowed_features) {
test(function() {
assert_true(policy_main.allowsFeature(feature));
assert_true(policy_main.allowsFeature(feature, "http://127.0.0.1:8000"));
}, 'Test policy.allowsFeature() on feature ' + feature);
}
test(function() {
assert_true(policy_main.allowsFeature("camera", "https://www.example.com"));
assert_true(policy_main.allowsFeature("camera", "https://www.example.net"));
}, 'Test policy.allowsFeature() for camera');
for (var feature of disallowed_features) {
test(function() {
assert_false(policy_main.allowsFeature(feature));
assert_false(policy_main.allowsFeature(feature, "http://127.0.0.1:8000"));
}, 'Test policy.allowsFeature() on disallowed feature ' + feature);
}
// Tests for policy.allowedFeatures().
var allowed_features_main = policy_main.allowedFeatures();
for (var feature of allowed_features) {
test(function() {
assert_true(allowed_features_main.includes(feature));
}, 'Test policy.allowedFeatures() include feature ' + feature);
}
for (var feature of disallowed_features) {
test(function() {
assert_false(allowed_features_main.includes(feature));
}, 'Test policy.allowedFeatures() does not include disallowed feature ' +
feature);
}
// Tests for policy.getAllowlistForFeature().
assert_array_equals(
policy_main.getAllowlistForFeature("fullscreen"), ["*"],
"fullscreen is allowed for all in main frame");
assert_array_equals(
policy_main.getAllowlistForFeature("payment"), ["http://127.0.0.1:8000"],
"payment is allowed for self");
assert_array_equals(
policy_main.getAllowlistForFeature("camera"),
["http://127.0.0.1:8000", "https://www.example.com", "https://www.example.net"],
"camera is allowed for multiple origins");
assert_array_equals(
policy_main.getAllowlistForFeature("midi"), [], "midi is disallowed for all");
</script>