Bug 1638177 [wpt PR 23624] - Origin isolation: test that insecure HTTP is not supported, a=testonly

domenic · domenic · commit dd7d8cc6ccb9 · 2020-06-08T20:01:39.000Z
Automatic update from web-platform-tests Origin isolation: test that insecure HTTP is not supported Bug: 1042415 Change-Id: I2acd2fea79a12e1f60eb9a0114abcf61630e269a Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2202512 Commit-Queue: Domenic Denicola <domenic@chromium.org> Reviewed-by: James MacLean <wjmaclean@chromium.org> Cr-Commit-Position: refs/heads/master@{#774243} -- wpt-commits: e7e5f03642e0d32eac9965ee993efa589fb3997d wpt-pr: 23624 Differential Revision: https://phabricator.services.mozilla.com/D78791
diff --git a/testing/web-platform/tests/origin-isolation/insecure-http.sub.html b/testing/web-platform/tests/origin-isolation/insecure-http.sub.html
@@ -0,0 +1,32 @@
+<!DOCTYPE html>
+<meta charset="utf-8">
+<title>Parent requests isolation, child requests isolation, child is a subdomain of the parent, but all over insecure HTTP</title>
+<script src="/resources/testharness.js"></script>
+<script src="/resources/testharnessreport.js"></script>
+
+<div id="log"></div>
+
+<script type="module">
+import { insertIframe, sendWasmModule, setBothDocumentDomains } from "./resources/helpers.mjs";
+
+let frameWindow;
+promise_setup(async () => {
+  frameWindow = await insertIframe("{{hosts[][www]}}", "?1");
+});
+
+// All isolation requests are ignored, since this is over insecure HTTP.
+// So both end up in the site-keyed agent cluster.
+
+promise_test(async () => {
+  const whatHappened = await sendWasmModule(frameWindow);
+
+  assert_equals(whatHappened, "WebAssembly.Module message received");
+}, "message event must occur");
+
+promise_test(async () => {
+  await setBothDocumentDomains(frameWindow);
+
+  // Must not throw
+  frameWindow.document;
+}, "setting document.domain must give sync access");
+</script>
diff --git a/testing/web-platform/tests/origin-isolation/insecure-http.sub.html.headers b/testing/web-platform/tests/origin-isolation/insecure-http.sub.html.headers
@@ -0,0 +1 @@
+Origin-Isolation: ?1
