mozilla-central/dom/serviceworkers/test/test_third_party_iframes.html (file symbol)

Source code

Revision control

Copy as Markdown

Other Tools

Test Info: Warnings

<!--
Any copyright is dedicated to the Public Domain.
-->
<!DOCTYPE HTML>
<html>
<head>
<meta http-equiv="Content-type" content="text/html;charset=UTF-8">
<title>Bug 1152899 - Disallow the interception of third-party iframes using service workers when the third-party cookie preference is set</title>
<script src="/tests/SimpleTest/SimpleTest.js"></script>
<link rel="stylesheet" type="text/css" href="/tests/SimpleTest/test.css" />
</head>
<body>
<script class="testbody" type="text/javascript">
var chromeScript;
chromeScript = SpecialPowers.loadChromeScript(_ => {
/* eslint-env mozilla/chrome-script */
Services.clearData.deleteData(Ci.nsIClearDataService.CLEAR_ALL, value => resolve());
});
SimpleTest.waitForExplicitFinish();
SimpleTest.requestLongerTimeout(2);
let index = 0;
function next() {
info("Step " + index);
if (index >= steps.length) {
SimpleTest.finish();
return;
}
try {
let i = index++;
steps[i]();
} catch(ex) {
ok(false, "Caught exception", ex);
}
}
onload = next;
let iframe;
let proxyWindow;
let basePath = "/tests/dom/serviceworkers/test/thirdparty/";
let origin = window.location.protocol + "//" + window.location.host;
let thirdPartyOrigin = "https://example.com";
function loadIframe() {
let message = {
source: "parent",
href: origin + basePath + "iframe2.html"
};
iframe.contentWindow.postMessage(message, "*");
}
function loadThirdPartyIframe() {
let message = {
source: "parent",
href: thirdPartyOrigin + basePath + "iframe2.html"
}
iframe.contentWindow.postMessage(message, "*");
}
function runTest(aExpectedResponses) {
// Let's use a proxy window to have the new cookie policy applied.
proxyWindow = window.open("window_party_iframes.html");
proxyWindow.onload = _ => {
iframe = proxyWindow.document.querySelector("iframe");
iframe.src = thirdPartyOrigin + basePath + "register.html";
let responsesIndex = 0;
window.onmessage = function(e) {
let status = e.data.status;
let expected = aExpectedResponses[responsesIndex];
if (status == expected.status) {
ok(true, "Received expected " + expected.status);
if (expected.next) {
expected.next();
}
} else {
ok(false, "Expected " + expected.status + " got " + status);
}
responsesIndex++;
};
}
}
// Verify that we can register and intercept a 3rd party iframe with
// the given cookie policy.
function testShouldIntercept(behavior, done) {
SpecialPowers.pushPrefEnv({"set": [
["network.cookie.cookieBehavior", behavior],
]}, function() {
runTest([{
status: "ok"
}, {
status: "registrationdone",
next() {
iframe.src = origin + basePath + "iframe1.html";
}
}, {
status: "iframeloaded",
next: loadIframe
}, {
status: "networkresponse",
}, {
status: "worker-networkresponse",
next: loadThirdPartyIframe
}, {
status: "swresponse",
}, {
status: "worker-swresponse",
next() {
iframe.src = thirdPartyOrigin + basePath + "unregister.html";
}
}, {
status: "controlled",
}, {
status: "unregistrationdone",
next() {
window.onmessage = null;
proxyWindow.close();
ok(true, "Test finished successfully");
done();
}
}]);
});
}
// Verify that we cannot register a service worker in a 3rd party
// iframe with the given cookie policy.
function testShouldNotRegister(behavior, done) {
SpecialPowers.pushPrefEnv({"set": [
["network.cookie.cookieBehavior", behavior],
]}, function() {
runTest([{
status: "registrationfailed",
next() {
iframe.src = origin + basePath + "iframe1.html";
}
}, {
status: "iframeloaded",
next: loadIframe
}, {
status: "networkresponse",
}, {
status: "worker-networkresponse",
next: loadThirdPartyIframe
}, {
status: "networkresponse",
}, {
status: "worker-networkresponse",
next() {
window.onmessage = null;
proxyWindow.close();
ok(true, "Test finished successfully");
done();
}
}]);
});
}
// Verify that if a service worker is already registered a 3rd
// party iframe will still not be intercepted with the given cookie
// policy.
function testShouldNotIntercept(behavior, done) {
SpecialPowers.pushPrefEnv({"set": [
["network.cookie.cookieBehavior", BEHAVIOR_ACCEPT],
]}, function() {
runTest([{
status: "ok"
}, {
status: "registrationdone",
next() {
SpecialPowers.pushPrefEnv({"set": [
["network.cookie.cookieBehavior", behavior],
]}, function() {
proxyWindow.close();
proxyWindow = window.open("window_party_iframes.html");
proxyWindow.onload = _ => {
iframe = proxyWindow.document.querySelector("iframe");
iframe.src = origin + basePath + "iframe1.html";
}
});
}
}, {
status: "iframeloaded",
next: loadIframe
}, {
status: "networkresponse",
}, {
status: "worker-networkresponse",
next: loadThirdPartyIframe
}, {
status: "networkresponse",
}, {
status: "worker-networkresponse",
next() {
iframe.src = thirdPartyOrigin + basePath + "unregister.html";
}
}, {
status: "uncontrolled",
}, {
status: "getregistrationfailed",
next() {
SpecialPowers.pushPrefEnv({"set": [
["network.cookie.cookieBehavior", BEHAVIOR_ACCEPT],
]}, function() {
proxyWindow.close();
proxyWindow = window.open("window_party_iframes.html");
proxyWindow.onload = _ => {
iframe = proxyWindow.document.querySelector("iframe");
iframe.src = thirdPartyOrigin + basePath + "unregister.html";
}
});
}
}, {
status: "controlled",
}, {
status: "unregistrationdone",
next() {
window.onmessage = null;
proxyWindow.close();
ok(true, "Test finished successfully");
done();
}
}]);
});
}
const BEHAVIOR_ACCEPT = 0;
const BEHAVIOR_REJECTFOREIGN = 1;
const BEHAVIOR_REJECT = 2;
const BEHAVIOR_LIMITFOREIGN = 3;
let steps = [() => {
SpecialPowers.pushPrefEnv({"set": [
["dom.serviceWorkers.exemptFromPerDomainMax", true],
["dom.serviceWorkers.enabled", true],
["dom.serviceWorkers.testing.enabled", true],
["browser.dom.window.dump.enabled", true],
["network.cookie.cookieBehavior", BEHAVIOR_ACCEPT],
]}, next);
}, () => {
testShouldNotRegister(BEHAVIOR_REJECTFOREIGN, next);
}, () => {
testShouldNotIntercept(BEHAVIOR_REJECTFOREIGN, next);
}, () => {
testShouldNotRegister(BEHAVIOR_REJECT, next);
}, () => {
testShouldNotIntercept(BEHAVIOR_REJECT, next);
}, () => {
testShouldNotRegister(BEHAVIOR_LIMITFOREIGN, next);
}, () => {
testShouldNotIntercept(BEHAVIOR_LIMITFOREIGN, next);
}, () => {
testShouldIntercept(BEHAVIOR_ACCEPT, next);
}];
</script>
</pre>
</body>
</html>