blob: 326c1dd54a5b1b30439d82635a38cef1baa57e5a [file] [log] [blame]
// META: title=Top-level navigation tests with grandchild frames
// META: script=/common/dispatcher/dispatcher.js
// META: script=/common/get-host-info.sub.js
// META: script=/common/utils.js
// META: script=/resources/testdriver.js
// META: script=/resources/testdriver-vendor.js
// META: script=/html/browsers/browsing-the-web/remote-context-helper/resources/remote-context-helper.js
// META: script=./resources/sandbox-top-navigation-helper.sub.js
'use strict';
promise_test(async t => {
const main = await setupTest();
const iframe_1 = await createNestedIframe(main,
"HTTP_ORIGIN", "", "");
const iframe_2 = await createNestedIframe(iframe_1,
"HTTP_ORIGIN", "allow-scripts", "");
await attemptTopNavigation(iframe_2, false);
}, "A fully sandboxed same-origin grandchild can't navigate top");
promise_test(async t => {
const main = await setupTest();
const iframe_1 = await createNestedIframe(main,
"HTTP_ORIGIN", "", "");
const iframe_2 = await createNestedIframe(iframe_1,
"HTTP_ORIGIN", "", "");
await attemptTopNavigation(iframe_2, true);
}, "An unsandboxed same-origin grandchild can navigate top");
promise_test(async t => {
const main = await setupTest();
const iframe_1 = await createNestedIframe(main,
"HTTP_REMOTE_ORIGIN", "", "");
const iframe_2 = await createNestedIframe(iframe_1,
"HTTP_ORIGIN", "", "");
await attemptTopNavigation(iframe_2, true);
}, "A same-origin grandchild in a cross-origin parent can navigate top");
promise_test(async t => {
const main = await setupTest();
const iframe_1 = await createNestedIframe(main,
"HTTP_REMOTE_ORIGIN", "", "");
const iframe_2 = await createNestedIframe(iframe_1,
"HTTP_ORIGIN", "allow-top-navigation allow-same-origin", "");
await attemptTopNavigation(iframe_2, true);
}, "A same-origin sandboxed grandchild in a cross-origin parent can navigate top");