| <!doctype html> | |
| <body> | |
| <script src=/resources/testharness.js></script> | |
| <script src=/resources/testharnessreport.js></script> | |
| <script src=/common/utils.js></script> | |
| <script src=/fenced-frame/resources/utils.js></script> | |
| <script src=/shared-storage/resources/util.js></script> | |
| <script> | |
| 'use strict'; | |
| const origin = window.location.origin; | |
| const rawSetHeader = 'set;key=hello;value=world'; | |
| const setHeader = encodeURIComponent(rawSetHeader); | |
| promise_test(async t => { | |
| let frame = document.createElement('iframe'); | |
| const promise = new Promise((resolve, reject) => { | |
| window.addEventListener('message', async function handler(evt) { | |
| if (evt.source === frame.contentWindow && | |
| evt.data.sharedStorageFetchStatus) { | |
| document.body.removeChild(frame); | |
| window.removeEventListener('message', handler); | |
| resolve(evt.data.sharedStorageFetchStatus); | |
| } | |
| }); | |
| window.addEventListener('error', (error) => { | |
| reject(error); | |
| }); | |
| }); | |
| const fetchUrl = | |
| `${origin}\\/shared-storage\\/resources\\/shared-storage-write.py` | |
| + `?write=${setHeader}`; | |
| const fetchCode = ` | |
| let parentOrOpener = window.opener || window.parent; | |
| let innerFrame = document.createElement('iframe'); | |
| window.addEventListener('message', async (evt) => { | |
| if (evt.source === innerFrame.contentWindow) { | |
| parentOrOpener.postMessage({sharedStorageFetchStatus: "success"}, '*'); | |
| } | |
| }); | |
| window.addEventListener('error', (error) => { | |
| parentOrOpener.postMessage({sharedStorageFetchStatus: error.message}, '*'); | |
| }); | |
| fetch('${fetchUrl}', {sharedStorageWritable: true}) | |
| .then(response => response.text()) | |
| .then(htmlContent => { | |
| innerFrame.srcdoc = htmlContent; | |
| document.body.appendChild(innerFrame); | |
| }) | |
| .catch(error => { | |
| parentOrOpener.postMessage({sharedStorageFetchStatus: error.name}, | |
| "*"); | |
| }); | |
| `; | |
| const dataURL = 'data:text/html;base64,' | |
| + btoa(unescape('%3Chtml%3E%3Cbody%3E%3Cscript%3E' | |
| + encodeURIComponent(fetchCode) + | |
| '%3C%2Fscript%3E%3C%2Fbody%3E%3C%2Fhtml%3E')); | |
| frame.src = dataURL; | |
| document.body.appendChild(frame); | |
| const result = await promise; | |
| assert_equals(result, "TypeError"); | |
| await verifyKeyNotFoundForOrigin('hello', origin); | |
| }, 'shared storage fetch request disallowed in opaque origin from data URL'); | |
| </script> | |
| </body> |