Source code
Revision control
Copy as Markdown
Other Tools
Test Info: Warnings
- This test has a WPT meta file that expects 2 subtest issues.
- This WPT test may be referenced by the following Test IDs:
- /connection-allowlist/tentative/service-worker-navigation.sub.https.window.html - WPT Dashboard Interop Dashboard
// META: script=/common/get-host-info.sub.js
// META: script=/service-workers/service-worker/resources/test-helpers.sub.js
const { HTTPS_ORIGIN, HTTPS_NOTSAMESITE_ORIGIN } = get_host_info();
// Helper to run a navigation test.
// - sw_script: SW script URL.
// - iframe_url: iframe URL.
// - target_url: URL to navigate to.
// - expected_result: 'success' or 'failure' (from SW navigate() promise).
// - expected_load: true or false (whether target page actually loaded).
async function run_navigation_test(t, sw_script, iframe_url, target_url, expected_result, expected_load) {
const scope = 'resources/';
// Register SW.
const registration = await service_worker_unregister_and_register(t, sw_script, scope);
await wait_for_state(t, registration.installing, 'activated');
t.add_cleanup(() => registration.unregister());
// Create iframe in scope.
const iframe = document.createElement('iframe');
iframe.src = iframe_url;
const iframe_load_promise = new Promise((resolve) => {
iframe.onload = () => resolve();
iframe.onerror = () => resolve();
});
document.body.appendChild(iframe);
await iframe_load_promise;
t.add_cleanup(() => iframe.remove());
assert_not_equals(iframe.contentWindow.navigator.serviceWorker.controller, null, 'iframe should be controlled');
// Set up message listener for 'loaded' message from post-message.html.
let received_load_message = false;
const message_handler = (e) => {
if (e.data === 'loaded') {
received_load_message = true;
}
};
window.addEventListener('message', message_handler);
t.add_cleanup(() => window.removeEventListener('message', message_handler));
// Trigger navigation from SW.
const sw_message_promise = new Promise((resolve, reject) => {
const timeout_id = step_timeout(() => {
reject(new Error("Timeout waiting for SW message."));
}, 5000);
const channel = new MessageChannel();
channel.port1.onmessage = (e) => {
clearTimeout(timeout_id);
resolve(e.data);
};
iframe.contentWindow.navigator.serviceWorker.controller.postMessage(
{url: target_url, port: channel.port2}, [channel.port2]);
});
let sw_result;
try {
sw_result = await sw_message_promise;
} catch (err) {
assert_unreached(err.message);
}
assert_equals(sw_result.result, expected_result, `SW navigate should report ${expected_result}. Logs:\n${sw_result.logs ? sw_result.logs.join("\n") : 'none'}`);
// Wait a bit to see if 'loaded' message arrives.
await new Promise(resolve => step_timeout(resolve, 100));
if (expected_load) {
assert_true(received_load_message, 'Target page should have loaded');
} else {
assert_false(received_load_message, 'Target page should not have loaded');
}
}
// Test 1: ServiceWorkerWindowClientNavigateEnforcesServiceWorkerAndDocumentAllowlists
// SW has empty allowlist, Document has no allowlist.
// Navigation to same-origin should be blocked by SW allowlist.
promise_test(async t => {
const sw_script = 'resources/sw-navigate-empty.js';
const iframe_url = 'resources/blank.html';
const target_url = `${HTTPS_ORIGIN}/connection-allowlist/tentative/resources/post-message.html`;
await run_navigation_test(t, sw_script, iframe_url, target_url, 'failure', false);
}, "clients.navigate() is blocked by Service Worker's empty Connection-Allowlist");
// Test 2: ServiceWorkerWindowClientNavigateObeysDocumentAllowlist
// SW allows same-origin and cross-origin.
// Document allows only same-origin.
// Navigation to cross-origin should be blocked by Document allowlist.
promise_test(async t => {
const sw_script = 'resources/sw-navigate-allow-both.js';
const iframe_url = 'resources/blank-allow-same-origin.html';
const target_url = `${HTTPS_NOTSAMESITE_ORIGIN}/connection-allowlist/tentative/resources/post-message.html`;
await run_navigation_test(t, sw_script, iframe_url, target_url, 'failure', false);
}, "clients.navigate() is blocked by Document's Connection-Allowlist");