resource-timing/workerStart-tao-protected.https.html

<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8" />
<title>Resource Timing - Check that workerStart is TAO protected</title>
<link rel="author" title="Google" href="http://www.google.com/" />
<link rel="help"
  href="https://www.w3.org/TR/resource-timing-2/#sec-performanceresourcetiming">
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
<script src="/common/get-host-info.sub.js"></script>
<script src="resources/entry-invariants.js"></script>
<script src="resources/resource-loaders.js"></script>
</head>
<body>
<script>

const {HTTPS_REMOTE_ORIGIN} = get_host_info();

const worker_has_unregistered = new Promise(resolve => {
  addEventListener("message", e => {
    if (e.data === "unregistered") {
      resolve();
    }
  });
});

// Open window to remote origin with a SW install.
let openee;
const service_worker_has_installed = new Promise(resolve => {
  addEventListener("message", e => {
    if (e.data === 'installed') {
      resolve();
    }
  });
  openee = window.open(HTTPS_REMOTE_ORIGIN +
    "/resource-timing/resources/sw-install.html");
});

const load_after_sw_install = async path => {
  await service_worker_has_installed;
  return load.iframe(path);
}

attribute_test(load_after_sw_install,
  `${HTTPS_REMOTE_ORIGIN}/resource-timing/resources/green.html`,
  entry => {
    assert_equals(entry.workerStart, 0, "workerStart must be zero");
    invariants.assert_tao_failure_resource(entry);
  },
  "A resource from a cross-origin service worker must not expose workerStart " +
  "when there is a TAO failure");

attribute_test(load_after_sw_install,
  `${HTTPS_REMOTE_ORIGIN}/resource-timing/resources/blank-with-tao.html`,
  entry => {
    assert_greater_than(entry.workerStart, 0,
      "workerStart must be greater than zero");
    // TODO(crbug.com/925239): need to add coverage for transferSize,
    // encoded/decodedBodySize but that's broken right now.
    // TODO(crbug.com/1171767): need to add coverage for SW-handled resources
    // that redirect. Should workerStart be non-zero if any piece of the
    // redirect chain is handled by a SW?
  },
  "A resource from a cross-origin service worker must expose workerStart " +
  "when there is a TAO match");

promise_test(async () => {
  openee.postMessage("unregister", "*");
  await worker_has_unregistered;
  openee.close();
}, "Not a test - needed to unregister the SW and close its embedder");

</script>
</body>
</html>