dom/permission/tests/test_cross_origin_iframe.html

   1 <!--
   2   Any copyright is dedicated to the Public Domain.
   3   http://creativecommons.org/publicdomain/zero/1.0/
   4 -->
   5 <!DOCTYPE HTML>
   6 <html>
   7
   8 <head>
   9   <meta charset="utf-8">
  10   <title>Test for Permissions API</title>
  11   <script src="/tests/SimpleTest/SimpleTest.js"></script>
  12   <link rel="stylesheet" href="/tests/SimpleTest/test.css">
  13 </head>
  14
  15 <body>
  16   <pre id="test"></pre>
  17   <script type="application/javascript">
  18   /*globals SpecialPowers, SimpleTest, is, ok, */
  19   'use strict';
  20
  21   function setPermission(type, allow) {
  22     return new Promise(resolve => {
  23       SpecialPowers.popPermissions(() => {
  24         SpecialPowers.pushPermissions(
  25           [{ type, allow, context: document }],
  26           resolve
  27         );
  28       });
  29     });
  30   }
  31
  32   function checkPermission(aIFrame, aExpectedState, aName) {
  33     return SpecialPowers.spawn(
  34       aIFrame,
  35       [{name: aName, expectedState: aExpectedState}],
  36       async aInput => {
  37         try {
  38           let result = await content.navigator
  39                                     .permissions
  40                                     .query({ name: aInput.name });
  41           is(
  42             SpecialPowers.wrap(result).state,
  43             aInput.expectedState,
  44             `correct state for '${aInput.name}'`
  45           );
  46         } catch (e) {
  47           ok(false, `query should not have rejected for '${aInput.name}'`)
  48         }
  49       }
  50     );
  51   }
  52
  53   function createIframe(aId, aAllow) {
  54     return new Promise((resolve) => {
  55       const iframe = document.createElement('iframe');
  56       iframe.id = aId;
  57       iframe.src = 'https://example.org/tests/dom/permission/tests/file_empty.html';
  58       if (aAllow) {
  59         iframe.allow = aAllow;
  60       }
  61       iframe.onload = () => resolve(iframe);
  62       document.body.appendChild(iframe);
  63     });
  64   }
  65
  66   function removeIframe(aId) {
  67     return new Promise((resolve) => {
  68       document.body.removeChild(document.getElementById(aId));
  69       resolve();
  70     });
  71   }
  72
  73   const {
  74     UNKNOWN_ACTION,
  75     PROMPT_ACTION,
  76     ALLOW_ACTION,
  77     DENY_ACTION
  78   } = SpecialPowers.Ci.nsIPermissionManager;
  79
  80   const tests = [
  81     {
  82       id: 'query navigation top unknown',
  83       top: UNKNOWN_ACTION,
  84       name: 'geolocation',
  85       type: 'geo',
  86       expected: 'denied',
  87     },
  88     {
  89       id: 'query notifications top unknown',
  90       top: UNKNOWN_ACTION,
  91       name: 'notifications',
  92       type: 'desktop-notification',
  93       expected: 'denied',
  94     },
  95     {
  96       id: 'query push top unknown',
  97       top: UNKNOWN_ACTION,
  98       name: 'push',
  99       type: 'desktop-notification',
 100       expected: 'denied',
 101     },
 102     {
 103       id: 'query persistent-storage unknown',
 104       top: UNKNOWN_ACTION,
 105       name: 'persistent-storage',
 106       type: 'persistent-storage',
 107       expected: 'denied',
 108     },
 109     {
 110       id: 'query storage-access unknown',
 111       top: UNKNOWN_ACTION,
 112       name: 'storage-access',
 113       type: '3rdPartyFrameStorage^https://example.org',
 114       expected: 'prompt',
 115     },
 116     {
 117       id: 'query camera top unknown',
 118       top: UNKNOWN_ACTION,
 119       name: 'camera',
 120       type: 'camera',
 121       expected: 'denied',
 122     },
 123     {
 124       id: 'query microphone top unknown',
 125       top: UNKNOWN_ACTION,
 126       name: 'microphone',
 127       type: 'microphone',
 128       expected: 'denied',
 129     },
 130     {
 131       id: 'query navigation top prompt',
 132       top: PROMPT_ACTION,
 133       name: 'geolocation',
 134       type: 'geo',
 135       expected: 'denied',
 136     },
 137     {
 138       id: 'query notifications top prompt',
 139       top: PROMPT_ACTION,
 140       name: 'notifications',
 141       type: 'desktop-notification',
 142       expected: 'denied',
 143     },
 144     {
 145       id: 'query push top prompt',
 146       top: PROMPT_ACTION,
 147       name: 'push',
 148       type: 'desktop-notification',
 149       expected: 'denied',
 150     },
 151     {
 152       id: 'query persistent-storage top prompt',
 153       top: PROMPT_ACTION,
 154       name: 'persistent-storage',
 155       type: 'persistent-storage',
 156       expected: 'denied',
 157     },
 158     {
 159       id: 'query storage-access top prompt',
 160       top: PROMPT_ACTION,
 161       name: 'storage-access',
 162       type: '3rdPartyFrameStorage^https://example.org',
 163       expected: 'prompt',
 164     },
 165     {
 166       id: 'query camera top prompt',
 167       top: PROMPT_ACTION,
 168       name: 'camera',
 169       type: 'camera',
 170       expected: 'denied',
 171     },
 172     {
 173       id: 'query microphone top prompt',
 174       top: PROMPT_ACTION,
 175       name: 'microphone',
 176       type: 'microphone',
 177       expected: 'denied',
 178     },
 179     {
 180       id: 'query navigation top denied',
 181       top: DENY_ACTION,
 182       name: 'geolocation',
 183       type: 'geo',
 184       expected: 'denied',
 185     },
 186     {
 187       id: 'query notifications top denied',
 188       top: DENY_ACTION,
 189       name: 'notifications',
 190       type: 'desktop-notification',
 191       expected: 'denied',
 192     },
 193     {
 194       id: 'query push top denied',
 195       top: DENY_ACTION,
 196       name: 'push',
 197       type: 'desktop-notification',
 198       expected: 'denied',
 199     },
 200     {
 201       id: 'query persistent-storage top denied',
 202       top: DENY_ACTION,
 203       name: 'persistent-storage',
 204       type: 'persistent-storage',
 205       expected: 'denied',
 206     },
 207     {
 208       id: 'query storage-access top denied',
 209       top: DENY_ACTION,
 210       name: 'storage-access',
 211       type: '3rdPartyFrameStorage^https://example.org',
 212       expected: 'prompt',
 213     },
 214     {
 215       id: 'query camera top denied',
 216       top: DENY_ACTION,
 217       name: 'camera',
 218       type: 'camera',
 219       expected: 'denied',
 220     },
 221     {
 222       id: 'query micrphone top denied',
 223       top: DENY_ACTION,
 224       name: 'microphone',
 225       type: 'microphone',
 226       expected: 'denied',
 227     },
 228     {
 229       id: 'query navigation top granted',
 230       top: ALLOW_ACTION,
 231       name: 'geolocation',
 232       type: 'geo',
 233       expected: 'denied',
 234     },
 235     {
 236       id: 'query notifications top granted',
 237       top: ALLOW_ACTION,
 238       name: 'notifications',
 239       type: 'desktop-notification',
 240       expected: 'denied',
 241     },
 242     {
 243       id: 'query push top granted',
 244       top: ALLOW_ACTION,
 245       name: 'push',
 246       type: 'desktop-notification',
 247       expected: 'denied',
 248     },
 249     {
 250       id: 'query persistent-storage top granted',
 251       top: ALLOW_ACTION,
 252       name: 'persistent-storage',
 253       type: 'persistent-storage',
 254       expected: 'denied',
 255     },
 256     {
 257       id: 'query storage-access top granted',
 258       top: ALLOW_ACTION,
 259       name: 'storage-access',
 260       type: '3rdPartyFrameStorage^https://example.org',
 261       expected: 'granted',
 262     },
 263     {
 264       id: 'query camera top granted',
 265       top: ALLOW_ACTION,
 266       name: 'camera',
 267       type: 'camera',
 268       expected: 'denied',
 269     },
 270     {
 271       id: 'query microphone top granted',
 272       top: ALLOW_ACTION,
 273       name: 'microphone',
 274       type: 'microphone',
 275       expected: 'denied',
 276     },
 277     {
 278       id: 'query navigation top denied, iframe has allow attribute',
 279       top: DENY_ACTION,
 280       allow: 'geolocation',
 281       name: 'geolocation',
 282       type: 'geo',
 283       expected: 'denied',
 284     },
 285     {
 286       id: 'query navigation top granted, iframe has allow attribute',
 287       top: ALLOW_ACTION,
 288       allow: 'geolocation',
 289       name: 'geolocation',
 290       type: 'geo',
 291       expected: 'granted',
 292     },
 293     {
 294       id: 'query navigation top prompt, iframe has allow attribute',
 295       top: PROMPT_ACTION,
 296       allow: 'geolocation',
 297       name: 'geolocation',
 298       type: 'geo',
 299       expected: 'prompt',
 300     },
 301     {
 302       id: 'query navigation top unknown, iframe has allow attribute',
 303       top: UNKNOWN_ACTION,
 304       allow: 'geolocation',
 305       name: 'geolocation',
 306       type: 'geo',
 307       expected: 'prompt',
 308     },
 309     {
 310       id: 'query storage-access top denied, iframe has allow none attribute',
 311       top: DENY_ACTION,
 312       allow: "storage-access 'none'",
 313       name: 'storage-access',
 314       type: '3rdPartyFrameStorage^https://example.org',
 315       expected: 'prompt',
 316     },
 317     {
 318       id: 'query storage-access top granted, iframe has allow none attribute',
 319       top: ALLOW_ACTION,
 320       allow: "storage-access 'none'",
 321       name: 'storage-access',
 322       type: '3rdPartyFrameStorage^https://example.org',
 323       expected: 'prompt',
 324     },
 325     {
 326       id: 'query storage-access top prompt, iframe has allow none attribute',
 327       top: PROMPT_ACTION,
 328       allow: "storage-access 'none'",
 329       name: 'storage-access',
 330       type: '3rdPartyFrameStorage^https://example.org',
 331       expected: 'prompt',
 332     },
 333     {
 334       id: 'query storage-access top unknown, iframe has allow none attribute',
 335       top: UNKNOWN_ACTION,
 336       allow: "storage-access 'none'",
 337       name: 'storage-access',
 338       type: '3rdPartyFrameStorage^https://example.org',
 339       expected: 'prompt',
 340     },
 341     {
 342       id: 'query camera top denied, iframe has allow attribute',
 343       top: DENY_ACTION,
 344       allow: 'camera',
 345       name: 'camera',
 346       type: 'camera',
 347       expected: 'denied',
 348     },
 349     {
 350       id: 'query camera top granted, iframe has allow attribute',
 351       top: ALLOW_ACTION,
 352       allow: 'camera',
 353       name: 'camera',
 354       type: 'camera',
 355       expected: 'granted',
 356     },
 357     {
 358       id: 'query camera top prompt, iframe has allow attribute',
 359       top: PROMPT_ACTION,
 360       allow: 'camera',
 361       name: 'camera',
 362       type: 'camera',
 363       expected: 'granted', // "Always Ask" mitigation (bug 1609427)
 364     },
 365     {
 366       id: 'query camera top unknown, iframe has allow attribute',
 367       top: UNKNOWN_ACTION,
 368       allow: 'camera',
 369       name: 'camera',
 370       type: 'camera',
 371       expected: 'prompt',
 372     },
 373     {
 374       id: 'query microphone top denied, iframe has allow attribute',
 375       top: DENY_ACTION,
 376       allow: 'microphone',
 377       name: 'microphone',
 378       type: 'microphone',
 379       expected: 'denied',
 380     },
 381     {
 382       id: 'query microphone top granted, iframe has allow attribute',
 383       top: ALLOW_ACTION,
 384       allow: 'microphone',
 385       name: 'microphone',
 386       type: 'microphone',
 387       expected: 'granted',
 388     },
 389     {
 390       id: 'query microphone top prompt, iframe has allow attribute',
 391       top: PROMPT_ACTION,
 392       allow: 'microphone',
 393       name: 'microphone',
 394       type: 'microphone',
 395       expected: 'granted', // "Always Ask" mitigation (bug 1609427)
 396     },
 397     {
 398       id: 'query microphone top unknown, iframe has allow attribute',
 399       top: UNKNOWN_ACTION,
 400       allow: 'microphone',
 401       name: 'microphone',
 402       type: 'microphone',
 403       expected: 'prompt',
 404     },
 405   ];
 406
 407   SimpleTest.waitForExplicitFinish();
 408
 409   async function nextTest() {
 410     if (!tests.length) {
 411       SimpleTest.finish();
 412       return;
 413     }
 414
 415     let test = tests.shift();
 416     await setPermission(test.type, test.top)
 417       .then(() => createIframe(test.id, test.allow))
 418       .then(iframe => checkPermission(iframe, test.expected, test.name))
 419       .then(() => removeIframe(test.id));
 420
 421     SimpleTest.executeSoon(nextTest);
 422   }
 423
 424   nextTest()
 425   </script>
 426 </body>
 427
 428 </html>