Source code
Revision control
Copy as Markdown
Other Tools
Test Info:
- This WPT test may be referenced by the following Test IDs:
- /storage-access-api/requestStorageAccess-sandboxed-iframe-allow-storage-access.sub.https.window.html - WPT Dashboard Interop Dashboard
// META: script=helpers.js
// META: script=/cookies/resources/cookie-helper.sub.js
// META: script=/resources/testdriver.js
// META: script=/resources/testdriver-vendor.js
'use strict';
// Document-level test config flags:
//
// testPrefix: Prefix each test case with an indicator so we know what context
// they are run in if they are used in multiple iframes.
//
// topLevelDocument: Keep track of if we run these tests in a nested context, we
// don't want to recurse forever.
const {testPrefix, topLevelDocument} = processQueryParams();
if (topLevelDocument) {
const frameSourceUrl =
const sandboxAttribute =
'allow-scripts allow-same-origin allow-storage-access-by-user-activation';
const testCase = 'sandboxed-iframe-allow-storage-access-by-user-activation';
RunTestsInIFrame(
frameSourceUrl + `?testCase=${testCase}`,
sandboxAttribute);
} else {
test(() => {
let iframe = document.createElement('iframe');
assert_true(
iframe.sandbox.supports('allow-storage-access-by-user-activation'),
'`allow-storage-access-by-user-activation`' +
'sandbox attribute should be supported');
}, '`allow-storage-access-by-user-activation` sandbox attribute is supported');
// Ideally this would check whether the user-activation condition changes
// the behavior; however, due to limitations in the test driver, the
// 'prompt' permission state is effectively the same as 'denied' from the
// perspective of platform tests.
promise_test(async t => {
await test_driver.set_permission({name: 'storage-access'}, 'granted');
await MaybeSetStorageAccess('*', '*', 'blocked');
await document.requestStorageAccess();
assert_true(
await CanAccessCookiesViaHTTP(),
'After obtaining storage access, subresource requests from the frame should send and set cookies.');
assert_true(
CanAccessCookiesViaJS(),
'After obtaining storage access, scripts in the frame should be able to access cookies.');
}, `[${testPrefix}] document.requestStorageAccess() should resolve even without a user gesture when already granted.`);
promise_test(async () => {
await test_driver.set_permission({name: 'storage-access'}, 'granted');
await MaybeSetStorageAccess('*', '*', 'blocked');
await RunCallbackWithGesture(async () => {
await document.requestStorageAccess();
});
assert_true(
await CanAccessCookiesViaHTTP(),
'After obtaining storage access, subresource requests from the frame should send and set cookies.');
assert_true(
CanAccessCookiesViaJS(),
'After obtaining storage access, scripts in the frame should be able to access cookies.');
}, `[${testPrefix}] document.requestStorageAccess() should resolve with a user gesture`);
}