third_party/WebKit/LayoutTests/http/tests/security/webgl-remote-read-remote-image-allowed-with-credentials.html

   1 <!doctype html>
   2 <html>
   3 <body>
   4 <pre id="console"></pre>
   5 <script>
   6 if (window.testRunner) {
   7     testRunner.overridePreference("WebKitWebGLEnabled", "1");
   8     testRunner.dumpAsText();
   9     testRunner.waitUntilDone();
  10 }
  11
  12 log = function(msg)
  13 {
  14     document.getElementById('console').appendChild(document.createTextNode(msg + "\n"));
  15 }
  16
  17 testTexImage2D = function(gl, source, description)
  18 {
  19     description = "Calling texImage2D() with an untainted " + description;
  20     try {
  21         gl.texImage2D(gl.TEXTURE_2D, 0, gl.RGBA, gl.RGBA, gl.UNSIGNED_BYTE, source);
  22         log("PASS: " + description + " was allowed");
  23     } catch (e) {
  24         log("FAIL: " + description + " was not allowed: Threw error: " + e + ".");
  25     }
  26 }
  27
  28 testReadPixels = function(gl, description)
  29 {
  30     description = "Calling readPixels() from a canvas tainted by a " + description;
  31     try {
  32         var pixels = new Uint8Array(4);
  33         gl.readPixels(0, 0, 1, 1, gl.RGBA, gl.UNSIGNED_BYTE, pixels);
  34         log("PASS: " + description + " was allowed.");
  35     } catch (e) {
  36         log("FAIL: " + description + " was not allowed - Threw error: " + e + ".");
  37     }
  38 }
  39
  40 testToDataURL = function(canvas, description)
  41 {
  42     description = "Calling toDataURL() on a canvas CORS-untainted by a " + description;
  43     try {
  44         var dataURL = canvas.toDataURL();
  45         log("PASS: " + description + " was allowed.");
  46     } catch (e) {
  47         log("FAIL: " + description + " was not allowed - Threw error: " + e + ".");
  48     }
  49 }
  50
  51 test = function(canvas, description)
  52 {
  53     testReadPixels(canvas.getContext("webgl"), description);
  54     testToDataURL(canvas, description);
  55 }
  56
  57 testResource = function (resource, resourceType, continuation)
  58 {
  59     log("");
  60     log("Testing " + resourceType + "...");
  61
  62     var canvas = document.createElement("canvas");
  63     canvas.width = 100;
  64     canvas.height = 100;
  65     var gl = canvas.getContext("webgl");
  66
  67     // Control tests
  68     log("Untainted canvas:");
  69     try {
  70         var pixels = new Uint8Array(4);
  71         gl.readPixels(0, 0, 1, 1, gl.RGBA, gl.UNSIGNED_BYTE, pixels);
  72         log("PASS: Calling readPixels() from an untainted canvas was allowed.");
  73     } catch (e) {
  74         log("FAIL: Calling readPixels() from an untainted canvas was not allowed: Threw error: " + e + ".");
  75     }
  76     try {
  77         var dataURL = canvas.toDataURL();
  78         log("PASS: Calling toDataURL() on an untainted canvas was allowed.");
  79     } catch (e) {
  80         log("FAIL: Calling toDataURL() on an untainted canvas was not allowed: Threw error: " + e + ".");
  81     }
  82
  83     log("");
  84     log("Tainted canvas:");
  85     // Test reading from a canvas after uploading a remote resource as a texture
  86     var texture = gl.createTexture();
  87     gl.bindTexture(gl.TEXTURE_2D, texture);
  88     testTexImage2D(gl, resource, resourceType);
  89
  90     test(canvas, "remote " + resourceType);
  91
  92     // Now test reading from a canvas after uploading a tainted canvas onto it
  93     var dirtyCanvas = document.createElement("canvas");
  94     dirtyCanvas.width = 100;
  95     dirtyCanvas.height = 100;
  96     var dirtyContext = dirtyCanvas.getContext("2d");
  97     dirtyContext.drawImage(resource, 0, 0, 100, 100);
  98     testTexImage2D(gl, dirtyCanvas, "canvas");
  99
 100     test(canvas, "CORS-untained canvas");
 101
 102     continuation();
 103 }
 104
 105 finishUp = function ()
 106 {
 107     if (window.testRunner)
 108         testRunner.notifyDone();
 109 }
 110
 111 testImage = function ()
 112 {
 113     var image = new Image();
 114     image.onload = testResource.bind(null, image, "image", testVideo);
 115     image.crossOrigin = "use-credentials";
 116     image.src = "http://localhost:8000/security/resources/abe-allow-credentials.php";
 117 }
 118
 119 testVideo = function ()
 120 {
 121     var video = document.createElement('video');
 122     video.oncanplay = testResource.bind(null, video, "video", finishUp);
 123     video.crossOrigin = "use-credentials";
 124     var name = "../../media/resources/test.ogv";
 125     var type = "video/ogg";
 126     video.src = "http://localhost:8000/security/resources/video-cross-origin-allow.php?with_credentials&name=" + name + "&type=" + type;
 127 }
 128
 129 finishUp = function ()
 130 {
 131     log("DONE");
 132     if (window.testRunner)
 133         testRunner.notifyDone();
 134 }
 135
 136 testImage();
 137 </script>
 138 </body>
 139 </html>