| // META: title=Top-level navigation tests with grandchild frames |
| // META: script=/common/dispatcher/dispatcher.js |
| // META: script=/common/get-host-info.sub.js |
| // META: script=/common/utils.js |
| // META: script=/resources/testdriver.js |
| // META: script=/resources/testdriver-vendor.js |
| // META: script=/html/browsers/browsing-the-web/remote-context-helper/resources/remote-context-helper.js |
| // META: script=./resources/sandbox-top-navigation-helper.sub.js |
| |
| 'use strict'; |
| |
| promise_test(async t => { |
| const main = await setupTest(); |
| const iframe_1 = await createNestedIframe(main, |
| "HTTP_ORIGIN", "", ""); |
| const iframe_2 = await createNestedIframe(iframe_1, |
| "HTTP_ORIGIN", "allow-scripts", ""); |
| |
| await attemptTopNavigation(iframe_2, false); |
| }, "A fully sandboxed same-origin grandchild can't navigate top"); |
| |
| promise_test(async t => { |
| const main = await setupTest(); |
| const iframe_1 = await createNestedIframe(main, |
| "HTTP_ORIGIN", "", ""); |
| const iframe_2 = await createNestedIframe(iframe_1, |
| "HTTP_ORIGIN", "", ""); |
| |
| await attemptTopNavigation(iframe_2, true); |
| }, "An unsandboxed same-origin grandchild can navigate top"); |
| |
| promise_test(async t => { |
| const main = await setupTest(); |
| const iframe_1 = await createNestedIframe(main, |
| "HTTP_REMOTE_ORIGIN", "", ""); |
| const iframe_2 = await createNestedIframe(iframe_1, |
| "HTTP_ORIGIN", "", ""); |
| |
| await attemptTopNavigation(iframe_2, true); |
| }, "A same-origin grandchild in a cross-origin parent can navigate top"); |
| |
| promise_test(async t => { |
| const main = await setupTest(); |
| const iframe_1 = await createNestedIframe(main, |
| "HTTP_REMOTE_ORIGIN", "", ""); |
| const iframe_2 = await createNestedIframe(iframe_1, |
| "HTTP_ORIGIN", "allow-top-navigation allow-same-origin", ""); |
| |
| await attemptTopNavigation(iframe_2, true); |
| }, "A same-origin sandboxed grandchild in a cross-origin parent can navigate top"); |