Skip to content

Commit

Permalink
Add WPT for referrer policy in history
Browse files Browse the repository at this point in the history
This CL adds a Web Platform Test checking for the following scenario:
1. An about:blank iframe is initially loaded with referrer policy A.
2. The iframe changes referrer policy to B by adding programmatically
   a meta tag.
3. After some navigations, a history navigation goes back to the
   about:blank iframe.
When reloading referrer policy from history, the iframe should end up
having referrer policy A (disregarding B).

Change-Id: I865336cad4148a60922215ae3bd6b4635613917f
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3382819
Reviewed-by: Nate Chapin <japhet@chromium.org>
Commit-Queue: Antonio Sartori <antoniosartori@chromium.org>
Cr-Commit-Position: refs/heads/main@{#958463}
  • Loading branch information
antosart authored and chromium-wpt-export-bot committed Jan 13, 2022
1 parent 632e549 commit 9000e4a
Showing 1 changed file with 80 additions and 0 deletions.
@@ -0,0 +1,80 @@
<!doctype html>
<title>Referrer Policy: navigating back to an about:blank iframe reuses the original referrer policy</title>
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
<meta name="referrer" content="no-referrer">
<div id="log"></div>
<script>
let checkReferrer = document => {
let script = document.createElement('script');
script.innerText = `
fetch("${origin}/common/security-features/subresource/xhr.py",
{referrer: "${location.origin}/custom"})
.then(r => r.json())
.then(j => {
top.postMessage({referrer: j.headers.referer}, "*")
}).catch(e => {
top.postMessage({referrer: "FAILURE"}, "*");
});
`

let referrer = new Promise(resolve => {
window.addEventListener("message", function listener(msg) {
window.removeEventListener("message", listener, false);
resolve(msg.data.referrer);
});
});

document.body.appendChild(script);

return referrer;
};

let iframeLoaded = iframe => {
return new Promise(resolve => {
iframe.onload = resolve;
});
};

promise_test(async t => {
// 1. Create an iframe and navigate it to about:blank.
// (We cannot just create an empty iframe since the initial empty
// document will get its history entry replaced, so we cannot
// navigate back to it.)
const iframe = document.createElement("iframe");
iframe.name = 'test_frame';
iframe.src = "/referrer-policy";
document.body.appendChild(iframe);
await iframeLoaded(iframe);

window.open('about:blank', 'test_frame');
await iframeLoaded(iframe);
let referrer_1 = await checkReferrer(iframe.contentDocument);
assert_equals(referrer_1, undefined,
"First navigation uses correct policy.");

// 2. Change the referrer policy of the iframe.
let meta = iframe.contentDocument.createElement('meta');
meta.name = 'referrer';
meta.content = "unsafe-url";
iframe.contentDocument.head.appendChild(meta);

let referrer_2 = await checkReferrer(iframe.contentDocument);
assert_equals(referrer_2, location.origin + '/custom',
"Referrer policy correctly changed.");

// 3. Navigate the iframe elsewhere.
window.open('/referrer-policy', 'test_frame');
await iframeLoaded(iframe);

// 4. Navigate the iframe back.
iframe.contentWindow.history.back();
await iframeLoaded(iframe);

let referrer_3 = await checkReferrer(iframe.contentDocument);
assert_equals(referrer_3, undefined,
"History navigation reuses original policy.");
document.body.removeChild(iframe);
}, "History navigation reuses original policy.");

</script>

0 comments on commit 9000e4a

Please sign in to comment.