Tools/TestWebKitAPI/Tests/WebKitCocoa/WKWebExtensionAPIDeclarativeNetRequest.mm - external/github.com/WebKit/webkit - Git at Google

 /*
  * Copyright (C) 2022-2024 Apple Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
  *    documentation and/or other materials provided with the distribution.
  *
  * THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS''
  * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
  * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS
  * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
  * THE POSSIBILITY OF SUCH DAMAGE.
  */

 #import "config.h"

 #if ENABLE(WK_WEB_EXTENSIONS)

 #import "HTTPServer.h"
 #import "TestNavigationDelegate.h"
 #import "WebExtensionUtilities.h"
 #import <WebKit/WKPreferencesPrivate.h>
 #import <WebKit/_WKFeature.h>
 #import <WebKit/_WKWebExtensionDeclarativeNetRequestRule.h>
 #import <WebKit/_WKWebExtensionDeclarativeNetRequestTranslator.h>

 namespace TestWebKitAPI {

 TEST(WKWebExtensionAPIDeclarativeNetRequest, BlockedLoadTest)
 {
     TestWebKitAPI::HTTPServer server({
         { "/"_s, { { { "Content-Type"_s, "text/html"_s } }, "<iframe src='/frame.html'></iframe>"_s } },
         { "/frame.html"_s, { { { "Content-Type"_s, "text/html"_s } }, "<body style='background-color: blue'></body>"_s } },
     }, TestWebKitAPI::HTTPServer::Protocol::Http);

     auto *backgroundScript = Util::constructScript(@[
         @"browser.test.sendMessage('Load Tab')"
     ]);

     auto *declarativeNetRequestManifest = @{
         @"manifest_version": @3,
         @"permissions": @[ @"declarativeNetRequest" ],
         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },
         @"declarative_net_request": @{
             @"rule_resources": @[
                 @{
                     @"id": @"blockFrame",
                     @"enabled": @YES,
                     @"path": @"rules.json"
                 }
             ]
         }
     };

     auto *rules = @"[ { \"id\" : 1, \"priority\": 1, \"action\" : { \"type\" : \"block\" }, \"condition\" : { \"urlFilter\" : \"frame\" } } ]";

     auto manager = Util::loadExtension(declarativeNetRequestManifest, @{ @"background.js": backgroundScript, @"rules.json": rules  });

     // Grant the declarativeNetRequest permission.
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequest];

     [manager runUntilTestMessage:@"Load Tab"];

     auto webView = manager.get().defaultTab.webView;
     auto navigationDelegate = adoptNS([TestNavigationDelegate new]);

     __block bool receivedActionNotification { false };
     navigationDelegate.get().contentRuleListPerformedAction = ^(WKWebView *, NSString *identifier, _WKContentRuleListAction *action, NSURL *url) {
         receivedActionNotification = true;
     };

     webView.navigationDelegate = navigationDelegate.get();

     [webView loadRequest:server.requestWithLocalhost()];

     Util::run(&receivedActionNotification);
 }

 #if !defined(NDEBUG)
 TEST(WKWebExtensionAPIDeclarativeNetRequest, DISABLED_BlockedLoadInPrivateBrowsingTest)
 #else
 TEST(WKWebExtensionAPIDeclarativeNetRequest, BlockedLoadInPrivateBrowsingTest)
 #endif
 {
     TestWebKitAPI::HTTPServer server({
         { "/"_s, { { { "Content-Type"_s, "text/html"_s } }, "<iframe src='/frame.html'></iframe>"_s } },
         { "/frame.html"_s, { { { "Content-Type"_s, "text/html"_s } }, "<body style='background-color: blue'></body>"_s } },
     }, TestWebKitAPI::HTTPServer::Protocol::Http);

     auto *backgroundScript = Util::constructScript(@[
         @"browser.test.sendMessage('Load Tab')"
     ]);

     auto *declarativeNetRequestManifest = @{
         @"manifest_version": @3,
         @"permissions": @[ @"declarativeNetRequest" ],
         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },
         @"declarative_net_request": @{
             @"rule_resources": @[
                 @{
                     @"id": @"blockFrame",
                     @"enabled": @YES,
                     @"path": @"rules.json"
                 }
             ]
         }
     };

     auto *rules = @"[ { \"id\" : 1, \"priority\": 1, \"action\" : { \"type\" : \"block\" }, \"condition\" : { \"urlFilter\" : \"frame\" } } ]";

     auto manager = Util::loadExtension(declarativeNetRequestManifest, @{ @"background.js": backgroundScript, @"rules.json": rules  });

     // Grant the declarativeNetRequest permission.
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequest];

     [manager runUntilTestMessage:@"Load Tab"];

     manager.get().context.hasAccessToPrivateData = YES;
     [manager closeWindow:manager.get().defaultWindow];

     auto privateWindow = [manager openNewWindowUsingPrivateBrowsing:YES];
     auto privateTab = privateWindow.tabs.firstObject;
     auto webView = privateTab.webView;

     auto navigationDelegate = adoptNS([TestNavigationDelegate new]);

     __block bool receivedActionNotification { false };
     navigationDelegate.get().contentRuleListPerformedAction = ^(WKWebView *, NSString *identifier, _WKContentRuleListAction *action, NSURL *url) {
         receivedActionNotification = true;
     };

     webView.navigationDelegate = navigationDelegate.get();

     [webView loadRequest:server.requestWithLocalhost()];

     Util::run(&receivedActionNotification);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, GetEnabledRulesets)
 {
     auto *backgroundScript = Util::constructScript(@[
         @"const enabledRulesets = await browser.declarativeNetRequest.getEnabledRulesets()",
         @"browser.test.assertEq(enabledRulesets.length, 1, 'One ruleset should have been enabled')",
         @"browser.test.assertEq(enabledRulesets[0], 'blockFrame', 'blockFrame should have been enabled')",

         @"browser.test.notifyPass()"
     ]);

     auto *declarativeNetRequestManifest = @{
         @"manifest_version": @3,
         @"permissions": @[ @"declarativeNetRequest" ],
         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },
         @"declarative_net_request": @{
             @"rule_resources": @[
                 @{
                     @"id": @"blockFrame",
                     @"enabled": @YES,
                     @"path": @"rules.json"
                 },
                 @{
                     @"id": @"blockFrame2",
                     @"enabled": @NO,
                     @"path": @"rules.json"
                 }
             ]
         }
     };

     auto *rules = @"[ { \"id\" : 1, \"priority\": 1, \"action\" : { \"type\" : \"block\" }, \"condition\" : { \"urlFilter\" : \"frame\" } } ]";

     auto manager = Util::loadExtension(declarativeNetRequestManifest, @{ @"background.js": backgroundScript, @"rules.json": rules  });

     // Grant the declarativeNetRequest permission.
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequest];

     [manager run];
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, UpdateEnabledRulesets)
 {
     auto *backgroundScript = Util::constructScript(@[

         // Test invalid argument types
         @"browser.test.assertThrows(() => browser.declarativeNetRequest.updateEnabledRulesets({ enableRulesetIds: 5 }), /'options' value is invalid, because 'enableRulesetIds' is expected to be an array of strings/i)",
         @"browser.test.assertThrows(() => browser.declarativeNetRequest.updateEnabledRulesets({ enableRulesetIds: '5' }), /'options' value is invalid, because 'enableRulesetIds' is expected to be an array of strings/i)",
         @"browser.test.assertThrows(() => browser.declarativeNetRequest.updateEnabledRulesets({ enableRulesetIds: [5] }), /'options' value is invalid, because 'enableRulesetIds' is expected to be an array of strings/i)",

         @"browser.test.assertThrows(() => browser.declarativeNetRequest.updateEnabledRulesets({ disableRulesetIds: 5 }), /'options' value is invalid, because 'disableRulesetIds' is expected to be an array of strings/i)",
         @"browser.test.assertThrows(() => browser.declarativeNetRequest.updateEnabledRulesets({ disableRulesetIds: '5' }), /'options' value is invalid, because 'disableRulesetIds' is expected to be an array of strings/i)",
         @"browser.test.assertThrows(() => browser.declarativeNetRequest.updateEnabledRulesets({ disableRulesetIds: [5] }), /'options' value is invalid, because 'disableRulesetIds' is expected to be an array of strings/i)",

         // The given identifiers must be specified in the manifest.
         @"await browser.test.assertRejects(browser.declarativeNetRequest.updateEnabledRulesets({ enableRulesetIds: ['notPresentIdentifier'] }), /Invalid ruleset id/i)",
         @"await browser.test.assertRejects(browser.declarativeNetRequest.updateEnabledRulesets({ disableRulesetIds: ['notPresentIdentifier'] }), /Invalid ruleset id/i)",

         // Before any modifications
         @"let enabledRulesets = await browser.declarativeNetRequest.getEnabledRulesets()",
         @"browser.test.assertEq(enabledRulesets.length, 1, 'One ruleset should have been enabled')",
         @"browser.test.assertEq(enabledRulesets[0], 'blockFrame', 'blockFrame should have been enabled')",

         // Turn off `blockFrame` and turn on `blockFrame2`.
         @"await browser.declarativeNetRequest.updateEnabledRulesets({ enableRulesetIds: ['blockFrame2'], disableRulesetIds: ['blockFrame'] })",

         // After the modifications
         @"enabledRulesets = await browser.declarativeNetRequest.getEnabledRulesets()",
         @"browser.test.assertEq(enabledRulesets.length, 1, 'One ruleset should have been enabled')",
         @"browser.test.assertEq(enabledRulesets[0], 'blockFrame2', 'blockFrame2 should have been enabled')",

         @"browser.test.notifyPass()"
     ]);

     auto *declarativeNetRequestManifest = @{
         @"manifest_version": @3,
         @"permissions": @[ @"declarativeNetRequest" ],
         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },
         @"declarative_net_request": @{
             @"rule_resources": @[
                 @{
                     @"id": @"blockFrame",
                     @"enabled": @YES,
                     @"path": @"rules.json"
                 },
                 @{
                     @"id": @"blockFrame2",
                     @"enabled": @NO,
                     @"path": @"rules.json"
                 }
             ]
         }
     };

     auto *rules = @"[ { \"id\" : 1, \"priority\": 1, \"action\" : { \"type\" : \"block\" }, \"condition\" : { \"urlFilter\" : \"frame\" } } ]";

     auto manager = Util::loadExtension(declarativeNetRequestManifest, @{ @"background.js": backgroundScript, @"rules.json": rules  });

     // Grant the declarativeNetRequest permission.
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequest];

     [manager run];
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, UpdateEnabledRulesetsPerformsCompilation)
 {
     TestWebKitAPI::HTTPServer server({
         { "/"_s, { { { "Content-Type"_s, "text/html"_s } }, "<iframe src='/frame.html'></iframe>"_s } },
         { "/frame.html"_s, { { { "Content-Type"_s, "text/html"_s } }, "<body style='background-color: blue'></body>"_s } },
     }, TestWebKitAPI::HTTPServer::Protocol::Http);

     auto *backgroundScript = Util::constructScript(@[
         // Before any modifications
         @"let enabledRulesets = await browser.declarativeNetRequest.getEnabledRulesets()",
         @"browser.test.assertEq(enabledRulesets.length, 0, 'No rulesets should have been enabled')",

         // Turn on `blockFrame`.
         @"await browser.declarativeNetRequest.updateEnabledRulesets({ enableRulesetIds: ['blockFrame'] })",

         // After the modifications
         @"enabledRulesets = await browser.declarativeNetRequest.getEnabledRulesets()",
         @"browser.test.assertEq(enabledRulesets.length, 1, 'One ruleset should have been enabled')",
         @"browser.test.assertEq(enabledRulesets[0], 'blockFrame', 'blockFrame should have been enabled')",

         @"browser.test.sendMessage('Load Tab')"
     ]);

     auto *declarativeNetRequestManifest = @{
         @"manifest_version": @3,
         @"permissions": @[ @"declarativeNetRequest" ],
         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },
         @"declarative_net_request": @{
             @"rule_resources": @[
                 @{
                     @"id": @"blockFrame",
                     @"enabled": @NO,
                     @"path": @"rules.json"
                 }
             ]
         }
     };

     auto *rules = @"[ { \"id\" : 1, \"priority\": 1, \"action\" : { \"type\" : \"block\" }, \"condition\" : { \"urlFilter\" : \"frame\" } } ]";

     auto manager = Util::loadExtension(declarativeNetRequestManifest, @{ @"background.js": backgroundScript, @"rules.json": rules  });

     // Grant the declarativeNetRequest permission.
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequest];

     [manager runUntilTestMessage:@"Load Tab"];

     auto webView = manager.get().defaultTab.webView;
     auto navigationDelegate = adoptNS([TestNavigationDelegate new]);

     __block bool receivedActionNotification { false };
     navigationDelegate.get().contentRuleListPerformedAction = ^(WKWebView *, NSString *identifier, _WKContentRuleListAction *action, NSURL *url) {
         receivedActionNotification = true;
     };

     webView.navigationDelegate = navigationDelegate.get();

     [webView loadRequest:server.requestWithLocalhost()];

     Util::run(&receivedActionNotification);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, IsRegexSupported)
 {
     auto *backgroundScript = Util::constructScript(@[
         // Invalid arguments
         @"browser.test.assertThrows(() => browser.declarativeNetRequest.isRegexSupported({ }), /'regexOptions' value is invalid, because it is missing required keys: 'regex'/i)",
         @"browser.test.assertThrows(() => browser.declarativeNetRequest.isRegexSupported({ regex: 5 }), /'regexOptions' value is invalid, because 'regex' is expected to be a string/i)",
         @"browser.test.assertThrows(() => browser.declarativeNetRequest.isRegexSupported({ regex: ['.*'] }), /'regexOptions' value is invalid, because 'regex' is expected to be a string/i)",
         @"browser.test.assertThrows(() => browser.declarativeNetRequest.isRegexSupported({ regex: '.*', isCaseSensitive: 'foo' }), /'regexOptions' value is invalid, because 'isCaseSensitive' is expected to be a boolean/i)",
         @"browser.test.assertThrows(() => browser.declarativeNetRequest.isRegexSupported({ regex: '.*', isCaseSensitive: 5 }), /'regexOptions' value is invalid, because 'isCaseSensitive' is expected to be a boolean/i)",
         @"browser.test.assertThrows(() => browser.declarativeNetRequest.isRegexSupported({ regex: '.*', requireCapturing: 'bar' }), /'regexOptions' value is invalid, because 'requireCapturing' is expected to be a boolean/i)",
         @"browser.test.assertThrows(() => browser.declarativeNetRequest.isRegexSupported({ regex: '.*', requireCapturing: 5 }), /'regexOptions' value is invalid, because 'requireCapturing' is expected to be a boolean/i)",

         // Passing cases
         @"browser.test.assertTrue((await browser.declarativeNetRequest.isRegexSupported({ regex: '.*' })).isSupported)",
         @"browser.test.assertTrue((await browser.declarativeNetRequest.isRegexSupported({ regex: 'a.*b' })).isSupported)",

         // Failing cases
         @"browser.test.assertFalse((await browser.declarativeNetRequest.isRegexSupported({ regex: 'Ä' })).isSupported)",
         @"browser.test.assertFalse((await browser.declarativeNetRequest.isRegexSupported({ regex: '' })).isSupported)",
         @"browser.test.assertFalse((await browser.declarativeNetRequest.isRegexSupported({ regex: 'a^' })).isSupported)",
         @"browser.test.assertFalse((await browser.declarativeNetRequest.isRegexSupported({ regex: 'this|that' })).isSupported)",
         @"browser.test.assertFalse((await browser.declarativeNetRequest.isRegexSupported({ regex: '$$' })).isSupported)",

         @"browser.test.notifyPass()"
     ]);

     auto *declarativeNetRequestManifest = @{
         @"manifest_version": @3,
         @"permissions": @[ @"declarativeNetRequest" ],
         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },
     };

     auto manager = Util::loadExtension(declarativeNetRequestManifest, @{ @"background.js": backgroundScript  });

     // Grant the declarativeNetRequest permission.
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequest];

     [manager run];
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, SetExtensionActionOptions)
 {
     TestWebKitAPI::HTTPServer server({
         { "/"_s, { { { "Content-Type"_s, "text/html"_s } }, "<iframe src='/frame.html'></iframe>"_s } },
         { "/frame.html"_s, { { { "Content-Type"_s, "text/html"_s } }, "<body style='background-color: blue'></body>"_s } },
     }, TestWebKitAPI::HTTPServer::Protocol::Http);

     auto *backgroundScript = Util::constructScript(@[
         @"const [currentTab] = await browser.tabs.query({ active: true, currentWindow: true })",
         @"browser.declarativeNetRequest.setExtensionActionOptions({ displayActionCountAsBadgeText: true })",

         @"setTimeout(() => {",
         @"  browser.declarativeNetRequest.setExtensionActionOptions({ tabUpdate: { tabId: currentTab.id, increment: 2 } })",
         @"  browser.test.sendMessage('Check badge text')",
         @"}, 1000)",

         @"browser.test.sendMessage('Load Tab')"
     ]);

     auto *declarativeNetRequestManifest = @{
         @"manifest_version": @3,
         @"permissions": @[ @"declarativeNetRequest", @"tabs" ],
         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },
         @"declarative_net_request": @{
             @"rule_resources": @[
                 @{
                     @"id": @"blockFrame",
                     @"enabled": @YES,
                     @"path": @"rules.json"
                 }
             ]
         }
     };

     auto *rules = @"[ { \"id\" : 1, \"priority\": 1, \"action\" : { \"type\" : \"block\" }, \"condition\" : { \"urlFilter\" : \"frame\" } } ]";

     auto manager = Util::loadExtension(declarativeNetRequestManifest, @{ @"background.js": backgroundScript, @"rules.json": rules  });

     // Grant the declarativeNetRequest and tabs permission.
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequest];
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionTabs];

     [manager runUntilTestMessage:@"Load Tab"];

     auto *defaultTab = manager.get().defaultTab;
     auto *webView = defaultTab.webView;
     auto navigationDelegate = adoptNS([TestNavigationDelegate new]);

     __block bool receivedActionNotification { false };
     navigationDelegate.get().contentRuleListPerformedAction = ^(WKWebView *, NSString *identifier, _WKContentRuleListAction *action, NSURL *url) {
         receivedActionNotification = true;
     };

     webView.navigationDelegate = navigationDelegate.get();

     [webView loadRequest:server.requestWithLocalhost()];

     Util::run(&receivedActionNotification);

     auto *action = [manager.get().context actionForTab:defaultTab];

     // The badge text should be "1" to match the one resource that was blocked.
     EXPECT_NS_EQUAL(action.badgeText, @"1");

     [manager runUntilTestMessage:@"Check badge text"];

     // The badge text should now be "3" since we incremented it by two.
     EXPECT_NS_EQUAL(action.badgeText, @"3");
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, GetMatchedRules)
 {
     TestWebKitAPI::HTTPServer server({
         { "/"_s, { { { "Content-Type"_s, "text/html"_s } }, "<iframe src='/frame.html'></iframe>"_s } },
         { "/frame.html"_s, { { { "Content-Type"_s, "text/html"_s } }, "<body style='background-color: blue'></body>"_s } },
     }, TestWebKitAPI::HTTPServer::Protocol::Http);

     auto *backgroundScript = Util::constructScript(@[
         @"setTimeout(async () => {",
         @"  const matchedRules = await browser.declarativeNetRequest.getMatchedRules()",
         @"  browser.test.assertEq(matchedRules.rulesMatchedInfo.length, 1)",
         @"  const matchedURL = matchedRules.rulesMatchedInfo[0].request.url",
         @"  browser.test.assertTrue(matchedURL.includes('localhost'), 'URL should include localhost')",
         @"  browser.test.assertTrue(matchedURL.includes('frame'), 'URL should include frame')",
         @"  browser.test.notifyPass()",
         @"}, 1000)",

         @"browser.test.sendMessage('Load Tab')"
     ]);

     auto *declarativeNetRequestManifest = @{
         @"manifest_version": @3,
         @"permissions": @[ @"declarativeNetRequest", @"declarativeNetRequestFeedback" ],
         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },
         @"declarative_net_request": @{
             @"rule_resources": @[
                 @{
                     @"id": @"blockFrame",
                     @"enabled": @YES,
                     @"path": @"rules.json"
                 }
             ]
         }
     };

     auto *rules = @"[ { \"id\" : 1, \"priority\": 1, \"action\" : { \"type\" : \"block\" }, \"condition\" : { \"urlFilter\" : \"frame\" } } ]";

     auto manager = Util::loadExtension(declarativeNetRequestManifest, @{ @"background.js": backgroundScript, @"rules.json": rules  });

     // Grant the declarativeNetRequestFeedback permission.
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequest];
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequestFeedback];

     auto *urlRequest = server.requestWithLocalhost();
     NSURL *requestURL = urlRequest.URL;
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forURL:requestURL];
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forURL:[requestURL URLByAppendingPathComponent:@"frame.html"]];

     [manager runUntilTestMessage:@"Load Tab"];

     [manager.get().defaultTab.webView loadRequest:urlRequest];

     [manager run];
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, SessionRules)
 {
     TestWebKitAPI::HTTPServer server({
         { "/"_s, { { { "Content-Type"_s, "text/html"_s } }, "<iframe src='/frame.html'></iframe>"_s } },
         { "/frame.html"_s, { { { "Content-Type"_s, "text/html"_s } }, "<body style='background-color: blue'></body>"_s } },
     }, TestWebKitAPI::HTTPServer::Protocol::Http);

     auto *backgroundScript = Util::constructScript(@[
         @"let sessionRules = await browser.declarativeNetRequest.getSessionRules()",
         @"browser.test.assertEq(sessionRules.length, 0)",
         @"await browser.declarativeNetRequest.updateSessionRules({ addRules: [{ id: 1, priority: 1, action: {type: 'block'}, condition: { urlFilter: 'frame' } }] })",
         @"sessionRules = await browser.declarativeNetRequest.getSessionRules()",
         @"browser.test.assertEq(sessionRules.length, 1)",

         @"browser.test.sendMessage('Load Tab')"
     ]);

     auto *declarativeNetRequestManifest = @{
         @"manifest_version": @3,
         @"permissions": @[ @"declarativeNetRequest" ],
         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },
     };

     auto manager = Util::loadExtension(declarativeNetRequestManifest, @{ @"background.js": backgroundScript  });

     // Grant the declarativeNetRequest permission.
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequest];

     EXPECT_FALSE(manager.get().context.hasContentModificationRules);

     [manager runUntilTestMessage:@"Load Tab"];

     EXPECT_TRUE(manager.get().context.hasContentModificationRules);

     auto webView = manager.get().defaultTab.webView;
     auto navigationDelegate = adoptNS([TestNavigationDelegate new]);

     __block bool receivedActionNotification { false };
     navigationDelegate.get().contentRuleListPerformedAction = ^(WKWebView *, NSString *identifier, _WKContentRuleListAction *action, NSURL *url) {
         receivedActionNotification = true;
     };

     webView.navigationDelegate = navigationDelegate.get();

     [webView loadRequest:server.requestWithLocalhost()];

     Util::run(&receivedActionNotification);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, GetSessionRules)
 {
     auto *backgroundScript = Util::constructScript(@[
         @"let sessionRules = await browser.declarativeNetRequest.getSessionRules()",
         @"browser.test.assertEq(sessionRules.length, 0)",

         @"await browser.declarativeNetRequest.updateSessionRules({ addRules: [{ id: 1, priority: 1, action: {type: 'block'}, condition: { urlFilter: 'foo' } }] })",
         @"await browser.declarativeNetRequest.updateSessionRules({ addRules: [{ id: 2, priority: 1, action: {type: 'block'}, condition: { urlFilter: 'bar' } }] })",
         @"await browser.declarativeNetRequest.updateSessionRules({ addRules: [{ id: 3, priority: 1, action: {type: 'block'}, condition: { urlFilter: 'baz' } }] })",

         @"await browser.test.assertRejects(browser.declarativeNetRequest.getSessionRules({ ruleIds: 1 }))",
         @"await browser.test.assertRejects(browser.declarativeNetRequest.getSessionRules({ ruleIds: '' }))",
         @"await browser.test.assertRejects(browser.declarativeNetRequest.getSessionRules({ ruleIds: true }))",
         @"await browser.test.assertRejects(browser.declarativeNetRequest.getSessionRules({ ruleIds: { } }))",
         @"await browser.test.assertRejects(browser.declarativeNetRequest.getSessionRules({ ruleIds: function foo() { } }))",
         @"await browser.test.assertRejects(browser.declarativeNetRequest.getSessionRules({ ruleIds: [ '' ] }))",
         @"await browser.test.assertRejects(browser.declarativeNetRequest.getSessionRules({ ruleIds: [ true ] }))",
         @"await browser.test.assertRejects(browser.declarativeNetRequest.getSessionRules({ ruleIds: [ { } ] }))",
         @"await browser.test.assertRejects(browser.declarativeNetRequest.getSessionRules({ ruleIds: [ function foo() { } ] }))",

         @"sessionRules = await browser.declarativeNetRequest.getSessionRules({ })",
         @"sessionRules = sessionRules.sort((a, b) => { a.id < b.id })",
         @"browser.test.assertEq(sessionRules.length, 3)",
         @"browser.test.assertEq(sessionRules[0].id, 1)",
         @"browser.test.assertEq(sessionRules[1].id, 2)",
         @"browser.test.assertEq(sessionRules[2].id, 3)",

         @"sessionRules = await browser.declarativeNetRequest.getSessionRules({ ruleIds: [ ] })",
         @"sessionRules = sessionRules.sort((a, b) => { a.id < b.id })",
         @"browser.test.assertEq(sessionRules.length, 3)",
         @"browser.test.assertEq(sessionRules[0].id, 1)",
         @"browser.test.assertEq(sessionRules[1].id, 2)",
         @"browser.test.assertEq(sessionRules[2].id, 3)",

         @"sessionRules = await browser.declarativeNetRequest.getSessionRules({ ruleIds: [ 1 ] })",
         @"browser.test.assertEq(sessionRules.length, 1)",
         @"browser.test.assertEq(sessionRules[0].id, 1)",

         @"sessionRules = await browser.declarativeNetRequest.getSessionRules({ ruleIds: [ 1, 2 ] })",
         @"sessionRules = sessionRules.sort((a, b) => { a.id < b.id })",
         @"browser.test.assertEq(sessionRules.length, 2)",
         @"browser.test.assertEq(sessionRules[0].id, 1)",
         @"browser.test.assertEq(sessionRules[1].id, 2)",

         @"sessionRules = await browser.declarativeNetRequest.getSessionRules({ ruleIds: [ 1, 2, 3 ] })",
         @"sessionRules = sessionRules.sort((a, b) => { a.id < b.id })",
         @"browser.test.assertEq(sessionRules.length, 3)",
         @"browser.test.assertEq(sessionRules[0].id, 1)",
         @"browser.test.assertEq(sessionRules[1].id, 2)",
         @"browser.test.assertEq(sessionRules[2].id, 3)",

         @"browser.test.notifyPass()"
     ]);

     auto *declarativeNetRequestManifest = @{
         @"manifest_version": @3,
         @"permissions": @[ @"declarativeNetRequest" ],
         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },
     };

     Util::loadAndRunExtension(declarativeNetRequestManifest, @{ @"background.js": backgroundScript  });
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RemoveSessionRules)
 {
     auto *backgroundScript = Util::constructScript(@[
         @"let sessionRules = await browser.declarativeNetRequest.getSessionRules()",
         @"browser.test.assertEq(sessionRules.length, 0)",

         @"await browser.declarativeNetRequest.updateSessionRules({ addRules: [{ id: 1, priority: 1, action: {type: 'block'}, condition: { urlFilter: 'foo' } }] })",
         @"await browser.declarativeNetRequest.updateSessionRules({ addRules: [{ id: 2, priority: 1, action: {type: 'block'}, condition: { urlFilter: 'bar' } }] })",
         @"await browser.declarativeNetRequest.updateSessionRules({ addRules: [{ id: 3, priority: 1, action: {type: 'block'}, condition: { urlFilter: 'baz' } }] })",

         @"sessionRules = await browser.declarativeNetRequest.getSessionRules({ })",
         @"browser.test.assertEq(sessionRules.length, 3)",

         @"await browser.declarativeNetRequest.updateSessionRules({ removeRuleIds: [1, 2, 3] })",

         @"sessionRules = await browser.declarativeNetRequest.getSessionRules({ })",
         @"browser.test.assertEq(sessionRules.length, 0)",

         @"browser.test.notifyPass()"
     ]);

     auto *declarativeNetRequestManifest = @{
         @"manifest_version": @3,
         @"permissions": @[ @"declarativeNetRequest" ],
         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },
     };

     Util::loadAndRunExtension(declarativeNetRequestManifest, @{ @"background.js": backgroundScript  });
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, DynamicRules)
 {
     TestWebKitAPI::HTTPServer server({
         { "/"_s, { { { "Content-Type"_s, "text/html"_s } }, "<iframe src='/frame.html'></iframe>"_s } },
         { "/frame.html"_s, { { { "Content-Type"_s, "text/html"_s } }, "<body style='background-color: blue'></body>"_s } },
     }, TestWebKitAPI::HTTPServer::Protocol::Http);

     auto *backgroundScript = Util::constructScript(@[
         @"let dynamicRules = await browser.declarativeNetRequest.getDynamicRules()",
         @"if (dynamicRules.length == 0) {",
         @"  await browser.declarativeNetRequest.updateDynamicRules({ addRules: [{ id: 1, priority: 1, action: {type: 'block'}, condition: { urlFilter: 'frame' } }] })",
         @"  dynamicRules = await browser.declarativeNetRequest.getDynamicRules()",
         @"  browser.test.assertEq(dynamicRules.length, 1)",

         @"  browser.test.sendMessage('Unload extension')",
         @"} else {",
         @"  browser.test.assertEq(dynamicRules.length, 1)",

         @"  browser.test.sendMessage('Load Tab')",
         @"}"
     ]);

     auto *declarativeNetRequestManifest = @{
         @"manifest_version": @3,
         @"permissions": @[ @"declarativeNetRequest" ],
         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },
     };

     auto manager = Util::parseExtension(declarativeNetRequestManifest, @{ @"background.js": backgroundScript }, WKWebExtensionControllerConfiguration._temporaryConfiguration);

     // Give the extension a unique identifier so it opts into saving data in the temporary configuration.
     manager.get().context.uniqueIdentifier = @"org.webkit.test.extension (76C788B8)";

     // Grant the declarativeNetRequest permission.
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequest];

     EXPECT_FALSE(manager.get().context.hasContentModificationRules);

     [manager load];
     [manager runUntilTestMessage:@"Unload extension"];

     EXPECT_TRUE(manager.get().context.hasContentModificationRules);

     auto *storageDirectory = manager.get().controller.configuration._storageDirectoryPath;
     storageDirectory = [storageDirectory stringByAppendingPathComponent:manager.get().context.uniqueIdentifier];
     EXPECT_TRUE([NSFileManager.defaultManager fileExistsAtPath:[storageDirectory stringByAppendingPathComponent:@"DeclarativeNetRequestContentRuleList.data"]]);

     [manager unload];
     [manager load];
     [manager runUntilTestMessage:@"Load Tab"];

     auto webView = manager.get().defaultTab.webView;
     auto navigationDelegate = adoptNS([TestNavigationDelegate new]);

     __block bool receivedActionNotification { false };
     navigationDelegate.get().contentRuleListPerformedAction = ^(WKWebView *, NSString *identifier, _WKContentRuleListAction *action, NSURL *url) {
         receivedActionNotification = true;
     };

     webView.navigationDelegate = navigationDelegate.get();

     [webView loadRequest:server.requestWithLocalhost()];

     Util::run(&receivedActionNotification);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, GetDynamicRules)
 {
     auto *backgroundScript = Util::constructScript(@[
         @"let dynamicRules = await browser.declarativeNetRequest.getDynamicRules()",
         @"browser.test.assertEq(dynamicRules.length, 0)",

         @"await browser.declarativeNetRequest.updateDynamicRules({ addRules: [{ id: 1, priority: 1, action: {type: 'block'}, condition: { urlFilter: 'foo' } }] })",
         @"await browser.declarativeNetRequest.updateDynamicRules({ addRules: [{ id: 2, priority: 1, action: {type: 'block'}, condition: { urlFilter: 'bar' } }] })",
         @"await browser.declarativeNetRequest.updateDynamicRules({ addRules: [{ id: 3, priority: 1, action: {type: 'block'}, condition: { urlFilter: 'baz' } }] })",

         @"await browser.test.assertRejects(browser.declarativeNetRequest.getDynamicRules({ ruleIds: 1 }))",
         @"await browser.test.assertRejects(browser.declarativeNetRequest.getDynamicRules({ ruleIds: '' }))",
         @"await browser.test.assertRejects(browser.declarativeNetRequest.getDynamicRules({ ruleIds: true }))",
         @"await browser.test.assertRejects(browser.declarativeNetRequest.getDynamicRules({ ruleIds: { } }))",
         @"await browser.test.assertRejects(browser.declarativeNetRequest.getDynamicRules({ ruleIds: function foo() { } }))",
         @"await browser.test.assertRejects(browser.declarativeNetRequest.getDynamicRules({ ruleIds: [ '' ] }))",
         @"await browser.test.assertRejects(browser.declarativeNetRequest.getDynamicRules({ ruleIds: [ true ] }))",
         @"await browser.test.assertRejects(browser.declarativeNetRequest.getDynamicRules({ ruleIds: [ { } ] }))",
         @"await browser.test.assertRejects(browser.declarativeNetRequest.getDynamicRules({ ruleIds: [ function foo() { } ] }))",

         @"dynamicRules = await browser.declarativeNetRequest.getDynamicRules({ })",
         @"dynamicRules = dynamicRules.sort((a, b) => { a.id < b.id })",
         @"browser.test.assertEq(dynamicRules.length, 3)",
         @"browser.test.assertEq(dynamicRules[0].id, 1)",
         @"browser.test.assertEq(dynamicRules[1].id, 2)",
         @"browser.test.assertEq(dynamicRules[2].id, 3)",

         @"dynamicRules = await browser.declarativeNetRequest.getDynamicRules({ ruleIds: [ ] })",
         @"dynamicRules = dynamicRules.sort((a, b) => { a.id < b.id })",
         @"browser.test.assertEq(dynamicRules.length, 3)",
         @"browser.test.assertEq(dynamicRules[0].id, 1)",
         @"browser.test.assertEq(dynamicRules[1].id, 2)",
         @"browser.test.assertEq(dynamicRules[2].id, 3)",

         @"dynamicRules = await browser.declarativeNetRequest.getDynamicRules({ ruleIds: [ 1 ] })",
         @"browser.test.assertEq(dynamicRules.length, 1)",
         @"browser.test.assertEq(dynamicRules[0].id, 1)",

         @"dynamicRules = await browser.declarativeNetRequest.getDynamicRules({ ruleIds: [ 1, 2 ] })",
         @"dynamicRules = dynamicRules.sort((a, b) => { a.id < b.id })",
         @"browser.test.assertEq(dynamicRules.length, 2)",
         @"browser.test.assertEq(dynamicRules[0].id, 1)",
         @"browser.test.assertEq(dynamicRules[1].id, 2)",

         @"dynamicRules = await browser.declarativeNetRequest.getDynamicRules({ ruleIds: [ 1, 2, 3 ] })",
         @"dynamicRules = dynamicRules.sort((a, b) => { a.id < b.id })",
         @"browser.test.assertEq(dynamicRules.length, 3)",
         @"browser.test.assertEq(dynamicRules[0].id, 1)",
         @"browser.test.assertEq(dynamicRules[1].id, 2)",
         @"browser.test.assertEq(dynamicRules[2].id, 3)",

         @"browser.test.notifyPass()"
     ]);

     auto *declarativeNetRequestManifest = @{
         @"manifest_version": @3,
         @"permissions": @[ @"declarativeNetRequest" ],
         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },
     };

     Util::loadAndRunExtension(declarativeNetRequestManifest, @{ @"background.js": backgroundScript  });
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RemoveDynamicRules)
 {
     auto *backgroundScript = Util::constructScript(@[
         @"let dynamicRules = await browser.declarativeNetRequest.getDynamicRules()",
         @"browser.test.assertEq(dynamicRules.length, 0)",

         @"await browser.declarativeNetRequest.updateDynamicRules({ addRules: [{ id: 1, priority: 1, action: {type: 'block'}, condition: { urlFilter: 'foo' } }] })",
         @"await browser.declarativeNetRequest.updateDynamicRules({ addRules: [{ id: 2, priority: 1, action: {type: 'block'}, condition: { urlFilter: 'bar' } }] })",
         @"await browser.declarativeNetRequest.updateDynamicRules({ addRules: [{ id: 3, priority: 1, action: {type: 'block'}, condition: { urlFilter: 'baz' } }] })",

         @"dynamicRules = await browser.declarativeNetRequest.getDynamicRules({ })",
         @"browser.test.assertEq(dynamicRules.length, 3)",

         @"await browser.declarativeNetRequest.updateDynamicRules({ removeRuleIds: [1, 2, 3] })",

         @"dynamicRules = await browser.declarativeNetRequest.getDynamicRules({ })",
         @"browser.test.assertEq(dynamicRules.length, 0)",

         @"browser.test.notifyPass()"
     ]);

     auto *declarativeNetRequestManifest = @{
         @"manifest_version": @3,
         @"permissions": @[ @"declarativeNetRequest" ],
         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },
     };

     Util::loadAndRunExtension(declarativeNetRequestManifest, @{ @"background.js": backgroundScript  });
 }

 static void runRedirectRule(bool useEnhancedSecurity)
 {
     auto *pageScript = Util::constructScript(@[
         @"<script>",
         @"  browser.test.assertTrue(location.href.startsWith('http://127.0.0.1'), 'Final load should be via IP address')",

         @"  browser.test.notifyPass()",
         @"</script>"
     ]);

     TestWebKitAPI::HTTPServer server({
         { "/"_s, { { { "Content-Type"_s, "text/html"_s } }, pageScript } },
     }, TestWebKitAPI::HTTPServer::Protocol::Http);

     auto *urlRequest = server.requestWithLocalhost();
     auto *redirectURL = server.request().URL.absoluteString;

     auto *rules = @[ @{
         @"id": @1,
         @"priority": @1,

         @"action": @{
             @"type": @"redirect",
             @"redirect": @{
                 @"url": redirectURL
             }
         },

         @"condition": @{
             @"urlFilter": @"localhost",
             @"resourceTypes": @[ @"main_frame" ]
         }
     } ];

     auto *manifest = @{
         @"manifest_version": @3,

         @"name": @"Test",
         @"description": @"Test",
         @"version": @"1",

         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },

         @"permissions": @[ @"declarativeNetRequestWithHostAccess" ],
         @"host_permissions": @[ @"*://localhost/*" ],

         @"declarative_net_request": @{
             @"rule_resources": @[ @{
                 @"id": @"redirectRule",
                 @"enabled": @YES,
                 @"path": @"rules.json"
             } ]
         }
     };

     RetainPtr backgroundScript = Util::constructScript(@[
         @"browser.test.sendMessage('Load Tab')"
     ]);

     auto *resources = @{
         @"background.js": backgroundScript.get(),
         @"rules.json": rules
     };

     auto extensionConfiguration = WKWebExtensionControllerConfiguration.nonPersistentConfiguration;

     if (useEnhancedSecurity) {
         auto preferences = [extensionConfiguration.webViewConfiguration preferences];
         for (_WKFeature *feature in [WKPreferences _features]) {
             if ([feature.key isEqualToString:@"EnhancedSecurityHeuristicsEnabled"])
                 [preferences _setEnabled:YES forFeature:feature];
         }
     }

     auto manager = Util::loadExtension(manifest, resources, extensionConfiguration, useEnhancedSecurity);

     auto navigationDelegate = adoptNS([TestNavigationDelegate new]);
     navigationDelegate.get().decidePolicyForNavigationAction = ^(WKNavigationAction *navigationAction, void (^decisionHandler)(WKNavigationActionPolicy)) {
         decisionHandler(WKNavigationActionPolicyAllow);

         if ([navigationAction.request.URL.absoluteString isEqual:redirectURL])
             EXPECT_TRUE(navigationAction.isContentRuleListRedirect);
     };

     manager.get().defaultTab.webView.navigationDelegate = navigationDelegate.get();

     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forURL:urlRequest.URL];

     [manager runUntilTestMessage:@"Load Tab"];

     [manager.get().defaultTab.webView loadRequest:urlRequest];

     [manager run];
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RedirectRule)
 {
     runRedirectRule(false);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RedirectRuleWithEnhancedSecurity)
 {
     runRedirectRule(true);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RedirectRuleWithoutHostAccessPermission)
 {
     auto *pageScript = Util::constructScript(@[
         @"<script>",
         @"  browser.test.assertTrue(location.href.startsWith('http://localhost'), 'Final load should be via localhost')",

         @"  browser.test.notifyPass()",
         @"</script>"
     ]);

     TestWebKitAPI::HTTPServer server({
         { "/"_s, { { { "Content-Type"_s, "text/html"_s } }, pageScript } },
     }, TestWebKitAPI::HTTPServer::Protocol::Http);

     auto *urlRequest = server.requestWithLocalhost();
     auto *redirectURL = server.request().URL.absoluteString;

     auto *rules = @[ @{
         @"id": @1,
         @"priority": @1,

         @"action": @{
             @"type": @"redirect",
             @"redirect": @{
                 @"url": redirectURL
             }
         },

         @"condition": @{
             @"urlFilter": @"localhost",
             @"resourceTypes": @[ @"main_frame" ]
         }
     } ];

     auto *manifest = @{
         @"manifest_version": @3,

         @"name": @"Test",
         @"description": @"Test",
         @"version": @"1",

         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },

         @"permissions": @[ @"declarativeNetRequestWithHostAccess" ],
         @"host_permissions": @[ @"*://localhost/*" ],

         @"declarative_net_request": @{
             @"rule_resources": @[ @{
                 @"id": @"redirectRule",
                 @"enabled": @YES,
                 @"path": @"rules.json"
             } ]
         }
     };

     auto *backgroundScript = Util::constructScript(@[
         @"browser.test.sendMessage('Load Tab')"
     ]);

     auto *resources = @{
         @"background.js": backgroundScript,
         @"rules.json": rules
     };

     auto manager = Util::loadExtension(manifest, resources);

     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusDeniedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequestWithHostAccess];
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forURL:urlRequest.URL];

     [manager runUntilTestMessage:@"Load Tab"];

     [manager.get().defaultTab.webView loadRequest:urlRequest];

     [manager run];
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RedirectRuleWithoutHostPermission)
 {
     auto *pageScript = Util::constructScript(@[
         @"<script>",
         @"  browser.test.assertTrue(location.href.startsWith('http://localhost'), 'Final load should be via localhost')",

         @"  browser.test.notifyPass()",
         @"</script>"
     ]);

     TestWebKitAPI::HTTPServer server({
         { "/"_s, { { { "Content-Type"_s, "text/html"_s } }, pageScript } },
     }, TestWebKitAPI::HTTPServer::Protocol::Http);

     auto *urlRequest = server.requestWithLocalhost();
     auto *redirectURL = server.request().URL.absoluteString;

     auto *rules = @[ @{
         @"id": @1,
         @"priority": @1,

         @"action": @{
             @"type": @"redirect",
             @"redirect": @{
                 @"url": redirectURL
             }
         },

         @"condition": @{
             @"urlFilter": @"localhost",
             @"resourceTypes": @[ @"main_frame" ]
         }
     } ];

     auto *manifest = @{
         @"manifest_version": @3,

         @"name": @"Test",
         @"description": @"Test",
         @"version": @"1",

         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },

         @"permissions": @[ @"declarativeNetRequestWithHostAccess" ],
         @"host_permissions": @[ @"*://localhost/*" ],

         @"declarative_net_request": @{
             @"rule_resources": @[ @{
                 @"id": @"redirectRule",
                 @"enabled": @YES,
                 @"path": @"rules.json"
             } ]
         }
     };

     auto *backgroundScript = Util::constructScript(@[
         @"browser.test.sendMessage('Load Tab')"
     ]);

     auto *resources = @{
         @"background.js": backgroundScript,
         @"rules.json": rules
     };

     auto manager = Util::loadExtension(manifest, resources);

     [manager runUntilTestMessage:@"Load Tab"];

     [manager.get().defaultTab.webView loadRequest:urlRequest];

     [manager run];
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, ModifyHeadersRule)
 {
     auto *pageScript = Util::constructScript(@[
         @"<script>",
         @"  browser.test.assertEq(document.referrer, 'https://example.com/')",

         @"  browser.test.notifyPass()",
         @"</script>"
     ]);

     TestWebKitAPI::HTTPServer server({
         { "/"_s, { { { "Content-Type"_s, "text/html"_s } }, pageScript } },
     }, TestWebKitAPI::HTTPServer::Protocol::Http);

     auto *urlRequest = server.requestWithLocalhost();

     auto *rules = @[@{
         @"id": @1,
         @"priority": @1,

         @"action": @{
             @"type": @"modifyHeaders",
             @"requestHeaders": @[ @{
                 @"header": @"Referer",
                 @"operation": @"set",
                 @"value": @"https://example.com/"
             } ]
         },

         @"condition": @{
             @"urlFilter": @"localhost",
             @"resourceTypes": @[ @"main_frame" ]
         }
     }];

     auto *manifest = @{
         @"manifest_version": @3,

         @"name": @"Test",
         @"description": @"Test",
         @"version": @"1",

         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },

         @"permissions": @[ @"declarativeNetRequestWithHostAccess" ],
         @"host_permissions": @[ @"*://localhost/*" ],

         @"declarative_net_request": @{
             @"rule_resources": @[ @{
                 @"id": @"modifyHeadersRule",
                 @"enabled": @YES,
                 @"path": @"rules.json"
             } ]
         }
     };

     auto *backgroundScript = Util::constructScript(@[
         @"browser.test.sendMessage('Load Tab')"
     ]);

     auto *resources = @{
         @"background.js": backgroundScript,
         @"rules.json": rules
     };

     auto manager = Util::loadExtension(manifest, resources);

     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forURL:urlRequest.URL];

     [manager runUntilTestMessage:@"Load Tab"];

     [manager.get().defaultTab.webView loadRequest:urlRequest];

     [manager run];
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, ModifyHeadersRuleWithoutHostAccessPermission)
 {
     auto *pageScript = Util::constructScript(@[
         @"<script>",
         @"  browser.test.assertEq(document.referrer, '')",

         @"  browser.test.notifyPass()",
         @"</script>"
     ]);

     TestWebKitAPI::HTTPServer server({
         { "/"_s, { { { "Content-Type"_s, "text/html"_s } }, pageScript } },
     }, TestWebKitAPI::HTTPServer::Protocol::Http);

     auto *urlRequest = server.requestWithLocalhost();

     auto *rules = @[@{
         @"id": @1,
         @"priority": @1,

         @"action": @{
             @"type": @"modifyHeaders",
             @"requestHeaders": @[ @{
                 @"header": @"Referer",
                 @"operation": @"set",
                 @"value": @"https://example.com/"
             } ]
         },

         @"condition": @{
             @"urlFilter": @"localhost",
             @"resourceTypes": @[ @"main_frame" ]
         }
     }];

     auto *manifest = @{
         @"manifest_version": @3,

         @"name": @"Test",
         @"description": @"Test",
         @"version": @"1",

         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },

         @"permissions": @[ @"declarativeNetRequestWithHostAccess" ],
         @"host_permissions": @[ @"*://localhost/*" ],

         @"declarative_net_request": @{
             @"rule_resources": @[ @{
                 @"id": @"modifyHeadersRule",
                 @"enabled": @YES,
                 @"path": @"rules.json"
             } ]
         }
     };

     auto *backgroundScript = Util::constructScript(@[
         @"browser.test.sendMessage('Load Tab')"
     ]);

     auto *resources = @{
         @"background.js": backgroundScript,
         @"rules.json": rules
     };

     auto manager = Util::loadExtension(manifest, resources);

     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusDeniedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequestWithHostAccess];
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forURL:urlRequest.URL];

     [manager runUntilTestMessage:@"Load Tab"];

     [manager.get().defaultTab.webView loadRequest:urlRequest];

     [manager run];
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, ModifyHeadersRuleWithoutHostPermission)
 {
     auto *pageScript = Util::constructScript(@[
         @"<script>",
         @"  browser.test.assertEq(document.referrer, '')",

         @"  browser.test.notifyPass()",
         @"</script>"
     ]);

     TestWebKitAPI::HTTPServer server({
         { "/"_s, { { { "Content-Type"_s, "text/html"_s } }, pageScript } },
     }, TestWebKitAPI::HTTPServer::Protocol::Http);

     auto *urlRequest = server.requestWithLocalhost();

     auto *rules = @[@{
         @"id": @1,
         @"priority": @1,

         @"action": @{
             @"type": @"modifyHeaders",
             @"requestHeaders": @[ @{
                 @"header": @"Referer",
                 @"operation": @"set",
                 @"value": @"https://example.com/"
             } ]
         },

         @"condition": @{
             @"urlFilter": @"localhost",
             @"resourceTypes": @[ @"main_frame" ]
         }
     }];

     auto *manifest = @{
         @"manifest_version": @3,

         @"name": @"Test",
         @"description": @"Test",
         @"version": @"1",

         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },

         @"permissions": @[ @"declarativeNetRequestWithHostAccess" ],
         @"host_permissions": @[ @"*://localhost/*" ],

         @"declarative_net_request": @{
             @"rule_resources": @[ @{
                 @"id": @"modifyHeadersRule",
                 @"enabled": @YES,
                 @"path": @"rules.json"
             } ]
         }
     };

     auto *backgroundScript = Util::constructScript(@[
         @"browser.test.sendMessage('Load Tab')"
     ]);

     auto *resources = @{
         @"background.js": backgroundScript,
         @"rules.json": rules
     };

     auto manager = Util::loadExtension(manifest, resources);

     [manager runUntilTestMessage:@"Load Tab"];

     [manager.get().defaultTab.webView loadRequest:urlRequest];

     [manager run];
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, MainFrameAllowAllRequests)
 {
     TestWebKitAPI::HTTPServer server({
         { "/"_s, { { { "Content-Type"_s, "text/html"_s } }, "<iframe src='/frame.html'></iframe>"_s } },
         { "/frame.html"_s, { { { "Content-Type"_s, "text/html"_s } }, "<script>browser.test.notifyPass()</script>"_s } },
     }, TestWebKitAPI::HTTPServer::Protocol::Http);

     auto *backgroundScript = Util::constructScript(@[
         @"browser.test.sendMessage('Load Tab')"
     ]);

     auto *rules = @"[ { \"id\" : 1, \"priority\": 2, \"action\" : { \"type\" : \"allowAllRequests\" }, \"condition\" : { \"urlFilter\" : \"*\", \"resourceTypes\" : [ \"main_frame\" ] } }, { \"id\" : 2, \"priority\": 1, \"action\" : { \"type\" : \"block\" }, \"condition\" : { \"urlFilter\" : \"frame\" } } ]";

     auto *declarativeNetRequestManifest = @{
         @"manifest_version": @3,
         @"permissions": @[ @"declarativeNetRequest" ],
         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },
         @"declarative_net_request": @{
             @"rule_resources": @[
                 @{
                     @"id": @"blockAndAllowRules",
                     @"enabled": @YES,
                     @"path": @"rules.json"
                 }
             ]
         }
     };

     auto manager = Util::loadExtension(declarativeNetRequestManifest, @{ @"background.js": backgroundScript, @"rules.json": rules  });

     // Grant the declarativeNetRequest permission.
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequest];

     [manager runUntilTestMessage:@"Load Tab"];

     auto webView = manager.get().defaultTab.webView;

     auto *urlRequest = server.requestWithLocalhost();
     NSURL *requestURL = urlRequest.URL;
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forURL:requestURL];
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forURL:[requestURL URLByAppendingPathComponent:@"frame.html"]];

     [webView loadRequest:urlRequest];

     [manager run];
 }

 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
 TEST(WKWebExtensionAPIDeclarativeNetRequest, OnRuleMatchedDebugWithoutPermission)
 {
     auto *manifest = @{
         @"manifest_version": @3,
         @"permissions": @[ @"declarativeNetRequest" ],
         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },
     };

     auto *backgroundScript = Util::constructScript(@[
         @"browser.test.assertEq(typeof browser.declarativeNetRequest, 'object')",
         @"browser.test.assertEq(typeof browser.declarativeNetRequest.onRuleMatchedDebug, 'undefined')",
         @"browser.test.notifyPass()"
     ]);

     auto manager = Util::loadExtension(manifest, @{ @"background.js": backgroundScript });
     [manager run];
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, OnRuleMatchedDebug)
 {
     TestWebKitAPI::HTTPServer server({
         { "/"_s, { { { "Content-Type"_s, "text/html"_s } }, "<iframe src='/frame.html'></iframe>"_s } },
         { "/frame.html"_s, { { { "Content-Type"_s, "text/html"_s } }, "<h1>Hello, world!</h1>"_s } },
         { "/script.html"_s, { { { "Content-Type"_s, "text/html"_s } }, "<script type='module' src='/script.js'></script>"_s } },
         { "/script.js"_s, { { { "Content-Type"_s, "application/javascript"_s } }, "browser.test.notifyFail('This script shouldn't load')"_s } },
     }, TestWebKitAPI::HTTPServer::Protocol::Http);

     // FIXME: <rdar://159289161> Add checks for parentDocumentId once we support it
     auto *backgroundScript = Util::constructScript(@[
         @"browser.declarativeNetRequest.onRuleMatchedDebug.addListener((info) => {",
         @"  switch (info.rule.rulesetId) {",
         @"    case 'sub_frame rules':",
         @"      browser.test.assertEq(typeof info.request.documentId, 'string')",
         @"      browser.test.assertEq(info.request.documentLifecycle, undefined)",
         @"      browser.test.assertTrue(info.request.frameId > 0)",
         @"      browser.test.assertEq(info.request.frameType, 'sub_frame')",
         // FIXME: <rdar://159231459> Initiator of a sub-frame is null; it should be src of the iframe.
         @"      browser.test.assertEq(info.request.initiator, undefined)",
         @"      browser.test.assertEq(info.request.method, 'GET')",
         @"      browser.test.assertTrue(info.request.parentFrameId > 0)",
         @"      browser.test.assertTrue(info.request.tabId > 0)",
         @"      browser.test.assertEq(info.request.type, 'sub_frame')",
         @"      browser.test.assertEq(new URL(info.request.url).pathname, '/frame.html')",

         @"      browser.test.assertEq(info.rule.ruleId, 1)",
         @"      browser.test.assertEq(info.rule.extensionId, undefined)",

         @"      browser.test.sendMessage('Done')",
         @"      break",
         @"    case 'main_frame rules':",
         @"      browser.test.assertEq(typeof info.request.documentId, 'string')",
         @"      browser.test.assertEq(info.request.documentLifecycle, undefined)",
         @"      browser.test.assertEq(info.request.frameId, 0)",
         @"      browser.test.assertEq(info.request.frameType, 'outermost_frame')",
         @"      browser.test.assertEq(info.request.initiator, 'localhost')",
         @"      browser.test.assertEq(info.request.method, 'GET')",
         @"      browser.test.assertEq(info.request.parentFrameId, -1)",
         @"      browser.test.assertTrue(info.request.tabId > 0)",
         @"      browser.test.assertEq(info.request.type, 'main_frame')",
         @"      browser.test.assertEq(new URL(info.request.url).pathname, '/frame.html')",

         @"      browser.test.assertEq(info.rule.ruleId, 2)",
         @"      browser.test.assertEq(info.rule.extensionId, undefined)",

         @"      browser.test.sendMessage('Done')",
         @"      break",
         @"    case 'non_frame rules':",
         @"      browser.test.assertEq(info.request.documentId, undefined)",
         @"      browser.test.assertEq(info.request.documentLifecycle, undefined)",
         @"      browser.test.assertEq(info.request.frameId, 0)",
         @"      browser.test.assertEq(info.request.frameType, undefined)",
         @"      browser.test.assertEq(info.request.initiator, 'localhost')",
         @"      browser.test.assertEq(info.request.method, 'GET')",
         @"      browser.test.assertEq(info.request.parentFrameId, -1)",
         @"      browser.test.assertTrue(info.request.tabId > 0)",
         @"      browser.test.assertEq(info.request.type, 'script')",
         @"      browser.test.assertEq(new URL(info.request.url).pathname, '/script.js')",

         @"      browser.test.assertEq(info.rule.ruleId, 3)",
         @"      browser.test.assertEq(info.rule.extensionId, undefined)",

         @"      browser.test.notifyPass()",
         @"      break",
         @"    default:",
         @"      browser.test.notifyFail('Received an unexpected rulesetId.')",
         @"  }",
         @"})",

         @"browser.test.sendMessage('Load Tab')",
     ]);

     auto *subFrameRules = @"[{\"id\":1,\"action\":{\"type\":\"block\"},\"condition\":{\"urlFilter\":\"frame\",\"resourceTypes\":[\"sub_frame\"]}}]";
     auto *mainFrameRules = @"[{\"id\":2,\"action\":{\"type\":\"block\"},\"condition\":{\"urlFilter\":\"frame\",\"resourceTypes\":[\"main_frame\"]}}]";
     auto *nonFrameRules = @"[{\"id\":3,\"action\":{\"type\":\"block\"},\"condition\":{\"urlFilter\":\"script.js\",\"resourceTypes\":[\"script\"]}}]";

     auto *manifest = @{
         @"manifest_version": @3,
         @"permissions": @[ @"declarativeNetRequest", @"declarativeNetRequestFeedback" ],
         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },
         @"declarative_net_request": @{
             @"rule_resources": @[
                 @{
                     @"id": @"sub_frame rules",
                     @"enabled": @YES,
                     @"path": @"sub_frame.json"
                 },
                 @{
                     @"id": @"main_frame rules",
                     @"enabled": @YES,
                     @"path": @"main_frame.json"
                 },
                 @{
                     @"id": @"non_frame rules",
                     @"enabled": @YES,
                     @"path": @"non_frame.json"
                 }
             ]
         }
     };

     auto manager = Util::loadExtension(manifest, @{ @"background.js": backgroundScript, @"sub_frame.json": subFrameRules, @"main_frame.json": mainFrameRules, @"non_frame.json": nonFrameRules });
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequest];
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequestFeedback];
     [manager runUntilTestMessage:@"Load Tab"];

     // Test sub_frame rules
     auto *urlRequest = server.requestWithLocalhost();
     NSURL *requestURL = urlRequest.URL;
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forURL:requestURL];
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forURL:[requestURL URLByAppendingPathComponent:@"frame.html"]];
     [manager.get().defaultTab.webView loadRequest:urlRequest];

     [manager runUntilTestMessage:@"Done"];

     // Test main_frame rules
     [manager.get().defaultTab.webView loadRequest:server.requestWithLocalhost("/frame.html"_s)];
     [manager runUntilTestMessage:@"Done"];

     // Test non_frame rules
     [manager.get().defaultTab.webView loadRequest:server.requestWithLocalhost("/script.html"_s)];
     [manager run];
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, OnRuleMatchedDebugSessionRules)
 {
     TestWebKitAPI::HTTPServer server({
         { "/"_s, { { { "Content-Type"_s, "text/html"_s } }, "<iframe src='/frame.html'></iframe>"_s } },
         { "/frame.html"_s, { { { "Content-Type"_s, "text/html"_s } }, "<h1>Hello, world!</h1>"_s } },
     }, TestWebKitAPI::HTTPServer::Protocol::Http);

     auto *backgroundScript = Util::constructScript(@[
         @"browser.declarativeNetRequest.onRuleMatchedDebug.addListener((info) => {",
         @"  browser.test.assertEq(info.rule.rulesetId, '_session')",
         @"  browser.test.assertEq(info.rule.ruleId, 1)",
         @"  browser.test.notifyPass()",
         @"})",

         @"let sessionRules = await browser.declarativeNetRequest.getSessionRules()",
         @"browser.test.assertEq(sessionRules.length, 0)",
         @"await browser.declarativeNetRequest.updateSessionRules({ addRules: [{ id: 1, priority: 1, action: {type: 'block'}, condition: { urlFilter: 'frame' } }] })",
         @"sessionRules = await browser.declarativeNetRequest.getSessionRules()",
         @"browser.test.assertEq(sessionRules.length, 1)",
         @"browser.test.sendMessage('Load Tab')",
     ]);

     auto *manifest = @{
         @"manifest_version": @3,
         @"permissions": @[ @"declarativeNetRequest", @"declarativeNetRequestFeedback" ],
         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },
     };

     auto manager = Util::loadExtension(manifest, @{ @"background.js": backgroundScript });
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequest];
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequestFeedback];
     [manager runUntilTestMessage:@"Load Tab"];

     auto *urlRequest = server.requestWithLocalhost();
     NSURL *requestURL = urlRequest.URL;
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forURL:requestURL];
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forURL:[requestURL URLByAppendingPathComponent:@"frame.html"]];
     [manager.get().defaultTab.webView loadRequest:urlRequest];

     [manager run];
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, OnRuleMatchedDebugDynamicRules)
 {
     TestWebKitAPI::HTTPServer server({
         { "/"_s, { { { "Content-Type"_s, "text/html"_s } }, "<iframe src='/frame.html'></iframe>"_s } },
         { "/frame.html"_s, { { { "Content-Type"_s, "text/html"_s } }, "<h1>Hello, world!</h1>"_s } },
     }, TestWebKitAPI::HTTPServer::Protocol::Http);

     auto *backgroundScript = Util::constructScript(@[
         @"browser.declarativeNetRequest.onRuleMatchedDebug.addListener((info) => {",
         @"  browser.test.assertEq(info.rule.rulesetId, '_dynamic')",
         @"  browser.test.assertEq(info.rule.ruleId, 1)",
         @"  browser.test.notifyPass()",
         @"})",

         @"let dynamicRules = await browser.declarativeNetRequest.getDynamicRules()",
         @"browser.test.assertEq(dynamicRules.length, 0)",
         @"await browser.declarativeNetRequest.updateDynamicRules({ addRules: [{ id: 1, priority: 1, action: {type: 'block'}, condition: { urlFilter: 'frame' } }] })",
         @"dynamicRules = await browser.declarativeNetRequest.getDynamicRules()",
         @"browser.test.assertEq(dynamicRules.length, 1)",
         @"browser.test.sendMessage('Load Tab')",
     ]);

     auto *manifest = @{
         @"manifest_version": @3,
         @"permissions": @[ @"declarativeNetRequest", @"declarativeNetRequestFeedback" ],
         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },
     };

     auto manager = Util::loadExtension(manifest, @{ @"background.js": backgroundScript });
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequest];
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequestFeedback];
     [manager runUntilTestMessage:@"Load Tab"];

     auto *urlRequest = server.requestWithLocalhost();
     NSURL *requestURL = urlRequest.URL;
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forURL:requestURL];
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forURL:[requestURL URLByAppendingPathComponent:@"frame.html"]];
     [manager.get().defaultTab.webView loadRequest:urlRequest];

     [manager run];
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, DuplicatedRuleIDs)
 {
     auto *backgroundScript = Util::constructScript(@[
         @"let enabledRulesets = await browser.declarativeNetRequest.getEnabledRulesets()",
         @"browser.test.assertEq(enabledRulesets.length, 1, 'The static ruleset should be enabled.')",

         @"browser.test.sendMessage('Load Tab')"
     ]);

     auto *declarativeNetRequestManifest = @{
         @"name": @"Test",
         @"description": @"Test dNR extension",
         @"version": @"1",
         @"manifest_version": @3,
         @"permissions": @[ @"declarativeNetRequest" ],
         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },
         @"declarative_net_request": @{
             @"rule_resources": @[
                 @{
                     @"id": @"duplicated_rule_id",
                     @"enabled": @YES,
                     @"path": @"rules.json"
                 }
             ]
         }
     };

     auto *rules = @"[ { \"id\" : 1, \"priority\": 1, \"action\" : { \"type\" : \"block\" }, \"condition\" : { \"urlFilter\" : \"foo\" } }, { \"id\" : 1, \"priority\": 1, \"action\" : { \"type\" : \"block\" }, \"condition\" : { \"urlFilter\" : \"bar\" } } ]";

     auto manager = Util::loadExtension(declarativeNetRequestManifest, @{ @"background.js": backgroundScript, @"rules.json": rules });
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequest];

     [manager runUntilTestMessage:@"Load Tab"];

     NSArray<NSError *> *errors = manager.get().context.errors;
     ASSERT_EQ(errors.count, 1ul);
     ASSERT_TRUE([errors.firstObject.localizedDescription isEqualToString:@"`declarative_net_request` ruleset with id `duplicated_rule_id` duplicates the rule id `1`."]);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, DuplicatedRuleIDsInDifferentRulesets)
 {
     auto *backgroundScript = Util::constructScript(@[
         @"let enabledRulesets = await browser.declarativeNetRequest.getEnabledRulesets()",
         @"browser.test.assertEq(enabledRulesets.length, 2, 'The static rulesets should be enabled.')",

         @"browser.test.sendMessage('Load Tab')"
     ]);

     auto *declarativeNetRequestManifest = @{
         @"name": @"Test",
         @"description": @"Test dNR extension",
         @"version": @"1",
         @"manifest_version": @3,
         @"permissions": @[ @"declarativeNetRequest" ],
         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },
         @"declarative_net_request": @{
             @"rule_resources": @[
                 @{
                     @"id": @"ruleset_1",
                     @"enabled": @YES,
                     @"path": @"rules1.json"
                 },
                 @{
                     @"id": @"ruleset_2",
                     @"enabled": @YES,
                     @"path": @"rules2.json"
                 }
             ]
         }
     };

     auto *rules1 = @"[ { \"id\" : 1, \"priority\": 1, \"action\" : { \"type\" : \"block\" }, \"condition\" : { \"urlFilter\" : \"foo\" } } ]";
     auto *rules2 = @"[ { \"id\" : 1, \"priority\": 1, \"action\" : { \"type\" : \"block\" }, \"condition\" : { \"urlFilter\" : \"bar\" } } ]";

     auto manager = Util::loadExtension(declarativeNetRequestManifest, @{ @"background.js": backgroundScript, @"rules1.json": rules1, @"rules2.json": rules2 });
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequest];

     [manager runUntilTestMessage:@"Load Tab"];
     ASSERT_EQ(manager.get().context.errors.count, 0ul);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, OnRuleMatchedDebugExcludedRequestDomains)
 {
     TestWebKitAPI::HTTPServer server({
         { "/"_s, { { { "Content-Type"_s, "text/html"_s } }, "<iframe src='/frame.html'></iframe>"_s } },
         { "/frame.html"_s, { { { "Content-Type"_s, "text/html"_s } }, "<h1>Hello, world!</h1>"_s } },
     }, TestWebKitAPI::HTTPServer::Protocol::Http);

     auto *backgroundScript = Util::constructScript(@[
         @"browser.declarativeNetRequest.onRuleMatchedDebug.addListener((info) => {",
         @"  browser.test.notifyFail('onRuleMatchedDebug should not be called for an excluded request domain.')",
         @"})",

         @"browser.test.sendMessage('Load Tab')",
     ]);

     auto *rules = @"[{\"id\":1,\"priority\":1,\"action\":{\"type\":\"block\"},\"condition\":{\"urlFilter\":\"frame\",\"excludedRequestDomains\":[\"localhost\"],\"resourceTypes\":[\"sub_frame\"]}}]";
     auto *manifest = @{
         @"manifest_version": @3,
         @"permissions": @[ @"declarativeNetRequest", @"declarativeNetRequestFeedback" ],
         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },
         @"declarative_net_request": @{
             @"rule_resources": @[
                 @{
                     @"id": @"rules",
                     @"enabled": @YES,
                     @"path": @"rules.json"
                 }
             ]
         }
     };

     auto manager = Util::loadExtension(manifest, @{ @"background.js": backgroundScript, @"rules.json": rules });
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequest];
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequestFeedback];
     [manager runUntilTestMessage:@"Load Tab"];

     auto *urlRequest = server.requestWithLocalhost();
     NSURL *requestURL = urlRequest.URL;
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forURL:requestURL];
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forURL:[requestURL URLByAppendingPathComponent:@"frame.html"]];
     [manager.get().defaultTab.webView loadRequest:urlRequest];
     [manager.get().defaultTab.webView _test_waitForDidFinishNavigation];
     [manager done];
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, OnRuleMatchedDebugExcludedRequestMethods)
 {
     TestWebKitAPI::HTTPServer server({
         { "/"_s, { { { "Content-Type"_s, "text/html"_s } }, "<iframe src='/frame.html'></iframe>"_s } },
         { "/frame.html"_s, { { { "Content-Type"_s, "text/html"_s } }, "<h1>Hello, world!</h1>"_s } },
     }, TestWebKitAPI::HTTPServer::Protocol::Http);

     auto *backgroundScript = Util::constructScript(@[
         @"browser.declarativeNetRequest.onRuleMatchedDebug.addListener((info) => {",
         @"  browser.test.notifyFail('onRuleMatchedDebug should not be called for an excluded request method.')",
         @"})",

         @"browser.test.sendMessage('Load Tab')",
     ]);

     auto *rules = @"[{\"id\":1,\"priority\":1,\"action\":{\"type\":\"block\"},\"condition\":{\"urlFilter\":\"frame\",\"excludedRequestMethods\":[\"get\"],\"resourceTypes\":[\"sub_frame\"]}}]";
     auto *manifest = @{
         @"manifest_version": @3,
         @"permissions": @[ @"declarativeNetRequest", @"declarativeNetRequestFeedback" ],
         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },
         @"declarative_net_request": @{
             @"rule_resources": @[
                 @{
                     @"id": @"rules",
                     @"enabled": @YES,
                     @"path": @"rules.json"
                 }
             ]
         }
     };

     auto manager = Util::loadExtension(manifest, @{ @"background.js": backgroundScript, @"rules.json": rules });
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequest];
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequestFeedback];
     [manager runUntilTestMessage:@"Load Tab"];

     auto *urlRequest = server.requestWithLocalhost();
     NSURL *requestURL = urlRequest.URL;
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forURL:requestURL];
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forURL:[requestURL URLByAppendingPathComponent:@"frame.html"]];
     [manager.get().defaultTab.webView loadRequest:urlRequest];
     [manager.get().defaultTab.webView _test_waitForDidFinishNavigation];
     [manager done];
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, OnRuleMatchedDebugExcludedRequestDomainsAndExcludedRequestMethods)
 {
     TestWebKitAPI::HTTPServer server({
         { "/"_s, { { { "Content-Type"_s, "text/html"_s } }, "<iframe src='/frame.html'></iframe>"_s } },
         { "/frame.html"_s, { { { "Content-Type"_s, "text/html"_s } }, "<h1>Hello, world!</h1>"_s } },
     }, TestWebKitAPI::HTTPServer::Protocol::Http);

     auto *backgroundScript = Util::constructScript(@[
         @"browser.declarativeNetRequest.onRuleMatchedDebug.addListener((info) => {",
         @"  browser.test.notifyFail('onRuleMatchedDebug should not be called for an excluded request domain or an excluded request method.')",
         @"})",

         @"browser.test.sendMessage('Load Tab')",
     ]);

     auto *rules = @"[{\"id\":1,\"priority\":1,\"action\":{\"type\":\"block\"},\"condition\":{\"urlFilter\":\"frame\",\"excludedRequestDomains\":[\"localhost\"],\"excludedRequestMethods\":[\"get\"],\"resourceTypes\":[\"sub_frame\"]}}]";
     auto *manifest = @{
         @"manifest_version": @3,
         @"permissions": @[ @"declarativeNetRequest", @"declarativeNetRequestFeedback" ],
         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },
         @"declarative_net_request": @{
             @"rule_resources": @[
                 @{
                     @"id": @"rules",
                     @"enabled": @YES,
                     @"path": @"rules.json"
                 }
             ]
         }
     };

     auto manager = Util::loadExtension(manifest, @{ @"background.js": backgroundScript, @"rules.json": rules });
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequest];
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequestFeedback];
     [manager runUntilTestMessage:@"Load Tab"];

     auto *urlRequest = server.requestWithLocalhost();
     NSURL *requestURL = urlRequest.URL;
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forURL:requestURL];
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forURL:[requestURL URLByAppendingPathComponent:@"frame.html"]];
     [manager.get().defaultTab.webView loadRequest:urlRequest];
     [manager.get().defaultTab.webView _test_waitForDidFinishNavigation];
     [manager done];
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, OnRuleMatchedDebugRequestDomains)
 {
     TestWebKitAPI::HTTPServer server({
         { "/"_s, { { { "Content-Type"_s, "text/html"_s } }, "<iframe src='/frame.html'></iframe>"_s } },
         { "/frame.html"_s, { { { "Content-Type"_s, "text/html"_s } }, "<h1>Hello, world!</h1>"_s } },
     }, TestWebKitAPI::HTTPServer::Protocol::Http);

     auto *backgroundScript = Util::constructScript(@[
         @"browser.declarativeNetRequest.onRuleMatchedDebug.addListener((info) => {",
         @"  browser.test.assertEq(info.rule.rulesetId, 'rules');",
         @"  browser.test.assertEq(info.rule.ruleId, 1);",
         @"  browser.test.assertEq(info.request.type, 'sub_frame');",
         @"  browser.test.notifyPass();",
         @"})",

         @"browser.test.sendMessage('Load Tab');",
     ]);

     auto *rules = @"[{\"id\":1,\"priority\":1,\"action\":{\"type\":\"block\"},\"condition\":{\"urlFilter\":\"frame\",\"requestDomains\":[\"localhost\"],\"resourceTypes\":[\"sub_frame\"]}}]";
     auto *manifest = @{
         @"manifest_version": @3,
         @"permissions": @[ @"declarativeNetRequest", @"declarativeNetRequestFeedback" ],
         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },
         @"declarative_net_request": @{
             @"rule_resources": @[
                 @{
                     @"id": @"rules",
                     @"enabled": @YES,
                     @"path": @"rules.json"
                 }
             ]
         }
     };

     auto manager = Util::loadExtension(manifest, @{ @"background.js": backgroundScript, @"rules.json": rules });
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequest];
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequestFeedback];
     [manager runUntilTestMessage:@"Load Tab"];

     auto *urlRequest = server.requestWithLocalhost();
     NSURL *requestURL = urlRequest.URL;
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forURL:requestURL];
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forURL:[requestURL URLByAppendingPathComponent:@"frame.html"]];
     [manager.get().defaultTab.webView loadRequest:urlRequest];
     [manager run];
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, OnRuleMatchedDebugRequestMethods)
 {
     TestWebKitAPI::HTTPServer server({
         { "/"_s, { { { "Content-Type"_s, "text/html"_s } }, "<iframe src='/frame.html'></iframe>"_s } },
         { "/frame.html"_s, { { { "Content-Type"_s, "text/html"_s } }, "<h1>Hello, world!</h1>"_s } },
     }, TestWebKitAPI::HTTPServer::Protocol::Http);

     auto *backgroundScript = Util::constructScript(@[
         @"browser.declarativeNetRequest.onRuleMatchedDebug.addListener((info) => {",
         @"  browser.test.assertEq(info.rule.rulesetId, 'rules');",
         @"  browser.test.assertEq(info.rule.ruleId, 1);",
         @"  browser.test.assertEq(info.request.type, 'sub_frame');",
         @"  browser.test.assertEq(info.request.method, 'GET');",
         @"  browser.test.notifyPass();",
         @"})",

         @"browser.test.sendMessage('Load Tab');",
     ]);

     auto *rules = @"[{\"id\":1,\"priority\":1,\"action\":{\"type\":\"block\"},\"condition\":{\"urlFilter\":\"frame\",\"requestMethods\":[\"get\"],\"resourceTypes\":[\"sub_frame\"]}}]";
     auto *manifest = @{
         @"manifest_version": @3,
         @"permissions": @[ @"declarativeNetRequest", @"declarativeNetRequestFeedback" ],
         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },
         @"declarative_net_request": @{
             @"rule_resources": @[
                 @{
                     @"id": @"rules",
                     @"enabled": @YES,
                     @"path": @"rules.json"
                 }
             ]
         }
     };

     auto manager = Util::loadExtension(manifest, @{ @"background.js": backgroundScript, @"rules.json": rules });
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequest];
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequestFeedback];
     [manager runUntilTestMessage:@"Load Tab"];

     auto *urlRequest = server.requestWithLocalhost();
     NSURL *requestURL = urlRequest.URL;
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forURL:requestURL];
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forURL:[requestURL URLByAppendingPathComponent:@"frame.html"]];
     [manager.get().defaultTab.webView loadRequest:urlRequest];
     [manager run];
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, OnRuleMatchedDebugRequestDomainsAndRequestMethods)
 {
     TestWebKitAPI::HTTPServer server({
         { "/"_s, { { { "Content-Type"_s, "text/html"_s } }, "<iframe src='/frame.html'></iframe>"_s } },
         { "/frame.html"_s, { { { "Content-Type"_s, "text/html"_s } }, "<h1>Hello, world!</h1>"_s } },
     }, TestWebKitAPI::HTTPServer::Protocol::Http);

     auto *backgroundScript = Util::constructScript(@[
         @"browser.declarativeNetRequest.onRuleMatchedDebug.addListener((info) => {",
         @"  browser.test.assertEq(info.rule.rulesetId, 'rules');",
         @"  browser.test.assertEq(info.rule.ruleId, 1);",
         @"  browser.test.assertEq(info.request.type, 'sub_frame');",
         @"  browser.test.assertEq(info.request.method, 'GET');",
         @"  browser.test.notifyPass();",
         @"})",
         @"browser.test.sendMessage('Load Tab');",
     ]);

     auto *rules = @"[{\"id\":1,\"priority\":1,\"action\":{\"type\":\"block\"},\"condition\":{\"urlFilter\":\"frame\",\"requestDomains\":[\"localhost\"],\"requestMethods\":[\"get\"],\"resourceTypes\":[\"sub_frame\"]}}]";
     auto *manifest = @{
         @"manifest_version": @3,
         @"permissions": @[ @"declarativeNetRequest", @"declarativeNetRequestFeedback" ],
         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },
         @"declarative_net_request": @{
             @"rule_resources": @[
                 @{
                     @"id": @"rules",
                     @"enabled": @YES,
                     @"path": @"rules.json"
                 }
             ]
         }
     };

     auto manager = Util::loadExtension(manifest, @{ @"background.js": backgroundScript, @"rules.json": rules });
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequest];
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequestFeedback];
     [manager runUntilTestMessage:@"Load Tab"];

     auto *urlRequest = server.requestWithLocalhost();
     NSURL *requestURL = urlRequest.URL;
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forURL:requestURL];
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forURL:[requestURL URLByAppendingPathComponent:@"frame.html"]];
     [manager.get().defaultTab.webView loadRequest:urlRequest];
     [manager run];
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, OnRuleMatchedDebugRequestInitiatorDomainsAndExcludedInitiatorDomains)
 {
     TestWebKitAPI::HTTPServer server({
         { "/"_s, { { { "Content-Type"_s, "text/html"_s } }, "<iframe src='/frame.html'></iframe>"_s } },
         { "/frame.html"_s, { { { "Content-Type"_s, "text/html"_s } }, "<h1>Hello, world!</h1>"_s } },
     }, TestWebKitAPI::HTTPServer::Protocol::Http);

     auto *backgroundScript = Util::constructScript(@[
         @"browser.declarativeNetRequest.onRuleMatchedDebug.addListener((info) => {",
         @"  browser.test.notifyFail('onRuleMatchedDebug should not be called for an excluded initiator domain.')",
         @"})",

         @"browser.test.sendMessage('Load Tab')",
     ]);

     auto *rules = @"[{\"id\":1,\"priority\":1,\"action\":{\"type\":\"block\"},\"condition\":{\"urlFilter\":\"frame\",\"initiatorDomains\":[\"example.com\"],\"excludedInitiatorDomains\":[\"localhost\"],\"resourceTypes\":[\"sub_frame\"]}}]";
     auto *manifest = @{
         @"manifest_version": @3,
         @"permissions": @[ @"declarativeNetRequest", @"declarativeNetRequestFeedback" ],
         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },
         @"declarative_net_request": @{
             @"rule_resources": @[
                 @{
                     @"id": @"rules",
                     @"enabled": @YES,
                     @"path": @"rules.json"
                 }
             ]
         }
     };

     auto manager = Util::loadExtension(manifest, @{ @"background.js": backgroundScript, @"rules.json": rules });
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequest];
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequestFeedback];
     [manager runUntilTestMessage:@"Load Tab"];

     auto *urlRequest = server.requestWithLocalhost();
     NSURL *requestURL = urlRequest.URL;
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forURL:requestURL];
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forURL:[requestURL URLByAppendingPathComponent:@"frame.html"]];
     [manager.get().defaultTab.webView loadRequest:urlRequest];
     [manager.get().defaultTab.webView _test_waitForDidFinishNavigation];
     [manager done];
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, OnRuleMatchedDebugRequestUpgradeScheme)
 {
     TestWebKitAPI::HTTPServer server({
         { "/"_s, { { { "Content-Type"_s, "text/html"_s } }, "<iframe src='/frame.html'></iframe>"_s } },
         { "/frame.html"_s, { { { "Content-Type"_s, "text/html"_s } }, "<h1>Hello, world!</h1>"_s } },
     }, TestWebKitAPI::HTTPServer::Protocol::Http);

     auto *backgroundScript = Util::constructScript(@[
         @"var onRuleMatchedDebugCount = 0",

         @"browser.declarativeNetRequest.onRuleMatchedDebug.addListener((info) => {",
         @"  onRuleMatchedDebugCount++",
         @"  browser.test.assertEq(onRuleMatchedDebugCount, 1, 'onRuleMatchedDebug should only be called once an upgrade action type.')",
         @"})",

         @"browser.test.sendMessage('Load Tab')",
     ]);

     auto *rules = @"[{\"id\":1,\"priority\":1,\"action\":{\"type\":\"upgradeScheme\"},\"condition\":{\"urlFilter\":\"frame\",\"resourceTypes\":[\"sub_frame\"]}}]";
     auto *manifest = @{
         @"manifest_version": @3,
         @"permissions": @[ @"declarativeNetRequest", @"declarativeNetRequestFeedback" ],
         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },
         @"declarative_net_request": @{
             @"rule_resources": @[
                 @{
                     @"id": @"rules",
                     @"enabled": @YES,
                     @"path": @"rules.json"
                 }
             ]
         }
     };

     auto manager = Util::loadExtension(manifest, @{ @"background.js": backgroundScript, @"rules.json": rules });
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequest];
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequestFeedback];
     [manager runUntilTestMessage:@"Load Tab"];

     auto *urlRequest = server.requestWithLocalhost();
     NSURL *requestURL = urlRequest.URL;
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forURL:requestURL];
     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forURL:[requestURL URLByAppendingPathComponent:@"frame.html"]];
     [manager.get().defaultTab.webView loadRequest:urlRequest];
     [manager.get().defaultTab.webView _test_waitForDidFinishNavigation];
     [manager done];
 }
 #endif

 // MARK: Rule translation tests

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RequiredAndOptionalKeys)
 {
     NSDictionary *rule1 = @{
         @"id": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"urlFilter": @"crouton.net",
             @"resourceTypes": @[ @"script" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule1 = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule1 rulesetID:@"Test Ruleset" errorString:nil];
     EXPECT_NOT_NULL(validatedRule1);

     NSDictionary *rule2 = @{
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"urlFilter": @"crouton.net",
             @"resourceTypes": @[ @"script" ],
         },
     };
     _WKWebExtensionDeclarativeNetRequestRule *validatedRule2 = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule2 rulesetID:@"Test Ruleset" errorString:nil];
     EXPECT_NULL(validatedRule2);

     NSDictionary *rule3 = @{
         @"id": @1,
         @"condition": @{
             @"urlFilter": @"crouton.net",
             @"resourceTypes": @[ @"script" ],
         },
     };
     _WKWebExtensionDeclarativeNetRequestRule *validatedRule3 = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule3 rulesetID:@"Test Ruleset" errorString:nil];
     EXPECT_NULL(validatedRule3);

     NSDictionary *rule4 = @{
         @"id": @1,
         @"action": @{ @"type": @"block" },
     };
     _WKWebExtensionDeclarativeNetRequestRule *validatedRule4 = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule4 rulesetID:@"Test Ruleset" errorString:nil];
     EXPECT_NULL(validatedRule4);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, PropertiesHaveCorrectType)
 {
     NSDictionary *rule1 = @{
         @"id": @"rule_id",
         @"priority": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"urlFilter": @"crouton.net",
             @"resourceTypes": @[ @"script" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule1 = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule1 rulesetID:@"Test Ruleset" errorString:nil];
     EXPECT_NULL(validatedRule1);

     NSDictionary *rule2 = @{
         @"id": @1,
         @"priority": @1,
         @"action": @"block",
         @"condition": @{
             @"urlFilter": @"crouton.net",
             @"resourceTypes": @[ @"script" ],
         },
     };
     _WKWebExtensionDeclarativeNetRequestRule *validatedRule2 = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule2 rulesetID:@"Test Ruleset" errorString:nil];
     EXPECT_NULL(validatedRule2);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, NumbersArePositiveIntegers)
 {
     NSDictionary *rule1 = @{
         @"id": @-1,
         @"priority": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"urlFilter": @"crouton.net",
             @"resourceTypes": @[ @"script" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule1 = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule1 rulesetID:@"Test Ruleset" errorString:nil];
     EXPECT_NULL(validatedRule1);

     NSDictionary *rule2 = @{
         @"id": @1,
         @"priority": @0,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"urlFilter": @"crouton.net",
             @"resourceTypes": @[ @"script" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule2 = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule2 rulesetID:@"Test Ruleset" errorString:nil];
     EXPECT_NULL(validatedRule2);

     NSDictionary *ruleWithNonIntegerPriority = @{
         @"id": @80,
         @"priority": @5.8,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"urlFilter": @"crouton.net",
             @"resourceTypes": @[ @"script" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRuleWithNonIntegerPriority = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:ruleWithNonIntegerPriority rulesetID:@"Test Ruleset" errorString:nil];
     EXPECT_NOT_NULL(validatedRuleWithNonIntegerPriority);
     EXPECT_EQ(validatedRuleWithNonIntegerPriority.ruleID, 80);
     EXPECT_EQ(validatedRuleWithNonIntegerPriority.priority, 5);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, OnlyOneOfResourceTypesAndExcludedResourceTypesIsSpecified)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"priority": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"urlFilter": @"boatnerd.com",
             @"resourceTypes": @[ @"font" ],
             @"excludedResourceTypes": @[ @"script" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     EXPECT_NULL(validatedRule);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RegexRuleConversion)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"priority": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"regexFilter": @".*\\.com",
             @"resourceTypes": @[ @"script" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     NSDictionary *convertedRule = validatedRule.ruleInWebKitFormat.firstObject;
     EXPECT_NOT_NULL(convertedRule);

     NSDictionary *correctRuleConversion = @{
         @"action": @{
             @"type": @"block",
         },
         @"trigger": @{
             @"url-filter": @".*\\.com",
             @"resource-type": @[ @"script" ],
         },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
         @"_identifier": @1,
         @"_rulesetIdentifier": @"Test Ruleset",
 #endif
     };

     EXPECT_NS_EQUAL(convertedRule, correctRuleConversion);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, BasicValidRuleParsing)
 {
     NSDictionary *conditionDictionary = @{
         @"urlFilter": @"crouton.net",
         @"resourceTypes": @[ @"script" ],
     };

     NSDictionary *rule = @{
         @"id": @1,
         @"priority": @3,
         @"action": @{ @"type": @"block" },
         @"condition": conditionDictionary,
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     EXPECT_NOT_NULL(validatedRule);
     EXPECT_EQ(validatedRule.ruleID, 1);
     EXPECT_EQ(validatedRule.priority, 3);
     EXPECT_NS_EQUAL(validatedRule.action, @{ @"type": @"block" });
     EXPECT_NS_EQUAL(validatedRule.condition, conditionDictionary);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, BasicRuleConversion)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"priority": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"urlFilter": @"crouton.net",
             @"resourceTypes": @[ @"font" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     NSDictionary *convertedRule = validatedRule.ruleInWebKitFormat.firstObject;
     EXPECT_NOT_NULL(convertedRule);

     NSDictionary *correctRuleConversion = @{
         @"action": @{
             @"type": @"block",
         },
         @"trigger": @{
             @"url-filter": @"crouton\\.net",
             @"resource-type": @[ @"font" ],
         },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
         @"_identifier": @1,
         @"_rulesetIdentifier": @"Test Ruleset",
 #endif
     };

     EXPECT_NS_EQUAL(convertedRule, correctRuleConversion);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, MainFrameResourceRuleConversion)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"priority": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"urlFilter": @"crouton.net",
             @"resourceTypes": @[ @"main_frame" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     NSDictionary *convertedRule = validatedRule.ruleInWebKitFormat.firstObject;
     EXPECT_NOT_NULL(convertedRule);

     NSDictionary *correctRuleConversion = @{
         @"action": @{
             @"type": @"block",
         },
         @"trigger": @{
             @"url-filter": @"crouton\\.net",
             @"resource-type": @[ @"top-document" ],
         },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
         @"_identifier": @1,
         @"_rulesetIdentifier": @"Test Ruleset",
 #endif
     };

     EXPECT_NS_EQUAL(convertedRule, correctRuleConversion);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, SubFrameResourceRuleConversion)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"priority": @1,
         @"action": @{ @"type": @"allow" },
         @"condition": @{
             @"urlFilter": @"crouton.net",
             @"resourceTypes": @[ @"sub_frame" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     NSDictionary *convertedRule = validatedRule.ruleInWebKitFormat.firstObject;
     EXPECT_NOT_NULL(convertedRule);

     NSDictionary *correctRuleConversion = @{
         @"action": @{
             @"type": @"ignore-following-rules",
         },
         @"trigger": @{
             @"url-filter": @"crouton\\.net",
             @"resource-type": @[ @"child-document" ],
         },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
         @"_identifier": @1,
         @"_rulesetIdentifier": @"Test Ruleset",
 #endif
     };

     EXPECT_NS_EQUAL(convertedRule, correctRuleConversion);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RepeatedMainFrameResourceRuleConversion)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"priority": @1,
         @"action": @{ @"type": @"allow" },
         @"condition": @{
             @"urlFilter": @"crouton.net",
             @"resourceTypes": @[ @"main_frame", @"main_frame" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     NSDictionary *convertedRule = validatedRule.ruleInWebKitFormat.firstObject;
     EXPECT_NOT_NULL(convertedRule);

     NSDictionary *correctRuleConversion = @{
         @"action": @{
             @"type": @"ignore-following-rules",
         },
         @"trigger": @{
             @"url-filter": @"crouton\\.net",
             @"resource-type": @[ @"top-document" ],
         },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
         @"_identifier": @1,
         @"_rulesetIdentifier": @"Test Ruleset",
 #endif
     };

     EXPECT_NS_EQUAL(convertedRule, correctRuleConversion);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, CaseSensitiveConversion)
 {
     NSDictionary *rule1 = @{
         @"id": @1,
         @"priority": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"urlFilter": @"crouton.net",
             @"isUrlFilterCaseSensitive": @YES,
             @"resourceTypes": @[ @"font" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule1 = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule1 rulesetID:@"Test Ruleset" errorString:nil];
     NSDictionary *convertedRule1 = validatedRule1.ruleInWebKitFormat.firstObject;
     EXPECT_NOT_NULL(convertedRule1);

     NSDictionary *correctRuleConversion1 = @{
         @"action": @{
             @"type": @"block",
         },
         @"trigger": @{
             @"url-filter": @"crouton\\.net",
             @"url-filter-is-case-sensitive": @YES,
             @"resource-type": @[ @"font" ],
         },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
         @"_identifier": @1,
         @"_rulesetIdentifier": @"Test Ruleset",
 #endif
     };
     EXPECT_NS_EQUAL(convertedRule1, correctRuleConversion1);

     NSDictionary *rule2 = @{
         @"id": @1,
         @"priority": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"urlFilter": @"crouton.net",
             @"isUrlFilterCaseSensitive": @NO,
             @"resourceTypes": @[ @"font" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule2 = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule2 rulesetID:@"Test Ruleset" errorString:nil];
     NSDictionary *convertedRule2 = validatedRule2.ruleInWebKitFormat.firstObject;
     EXPECT_NOT_NULL(convertedRule2);

     NSDictionary *correctRuleConversion2 = @{
         @"action": @{
             @"type": @"block",
         },
         @"trigger": @{
             @"url-filter": @"crouton\\.net",
             @"resource-type": @[ @"font" ],
         },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
         @"_identifier": @1,
         @"_rulesetIdentifier": @"Test Ruleset",
 #endif
     };
     EXPECT_NS_EQUAL(convertedRule2, correctRuleConversion2);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, ConvertingMultipleResourceTypes)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"priority": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"urlFilter": @"crouton.net",
             @"resourceTypes": @[ @"script", @"stylesheet", @"ping" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     NSMutableDictionary *convertedRule = [validatedRule.ruleInWebKitFormat.firstObject mutableCopy];
     EXPECT_NOT_NULL(convertedRule);

     NSDictionary *correctRuleConversion = [@{
         @"action": @{
             @"type": @"block",
         },
         @"trigger": [@{
             @"url-filter": @"crouton\\.net",
             @"resource-type": @[ @"script", @"style-sheet", @"ping" ],
         } mutableCopy],
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
         @"_identifier": @1,
         @"_rulesetIdentifier": @"Test Ruleset",
 #endif
     } mutableCopy];
     NSSet *actualResourceTypes = [NSSet setWithArray:convertedRule[@"trigger"][@"resource-type"]];
     NSSet *expectedResourceTypes = [NSSet setWithArray:correctRuleConversion[@"trigger"][@"resource-type"]];
     EXPECT_NS_EQUAL(actualResourceTypes, expectedResourceTypes);

     convertedRule[@"trigger"][@"resource-type"] = nil;
     correctRuleConversion[@"trigger"][@"resource-type"] = nil;
     EXPECT_NS_EQUAL(convertedRule, correctRuleConversion);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, ConvertingXHRWebSocketAndOtherTypes)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"priority": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"urlFilter": @"crouton.net",
             @"resourceTypes": @[ @"xmlhttprequest", @"websocket", @"other" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     NSMutableDictionary *convertedRule = [validatedRule.ruleInWebKitFormat.firstObject mutableCopy];
     EXPECT_NOT_NULL(convertedRule);

     NSDictionary *correctRuleConversion = [@{
         @"action": @{
             @"type": @"block",
         },
         @"trigger": [@{
             @"url-filter": @"crouton\\.net",
             @"resource-type": @[ @"fetch", @"websocket", @"other" ],
         } mutableCopy],
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
         @"_identifier": @1,
         @"_rulesetIdentifier": @"Test Ruleset",
 #endif
     } mutableCopy];
     NSSet *actualResourceTypes = [NSSet setWithArray:convertedRule[@"trigger"][@"resource-type"]];
     NSSet *expectedResourceTypes = [NSSet setWithArray:correctRuleConversion[@"trigger"][@"resource-type"]];
     EXPECT_NS_EQUAL(actualResourceTypes, expectedResourceTypes);

     convertedRule[@"trigger"][@"resource-type"] = nil;
     correctRuleConversion[@"trigger"][@"resource-type"] = nil;
     EXPECT_NS_EQUAL(convertedRule, correctRuleConversion);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, UpgradeSchemeRuleConversion)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"priority": @1,
         @"action": @{ @"type": @"upgradeScheme" },
         @"condition": @{
             @"urlFilter": @"crouton.net",
             @"resourceTypes": @[ @"image" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     NSArray<NSDictionary *> *convertedRules = validatedRule.ruleInWebKitFormat;
     EXPECT_EQ(convertedRules.count, 2ul);

     NSDictionary *makeHTTPSRule = @{
         @"action": @{
             @"type": @"make-https",
         },
         @"trigger": @{
             @"url-filter": @"crouton\\.net",
             @"resource-type": @[ @"image" ],
         },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
         @"_identifier": @1,
         @"_rulesetIdentifier": @"Test Ruleset",
 #endif
     };

     NSDictionary *sortingRule = @{
         @"action": @{
             @"type": @"ignore-following-rules",
         },
         @"trigger": @{
             @"url-filter": @"crouton\\.net",
             @"resource-type": @[ @"image" ],
         },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
         @"_identifier": @1,
         @"_rulesetIdentifier": @"Test Ruleset",
 #endif
     };

     EXPECT_NS_EQUAL(convertedRules[0], makeHTTPSRule);
     EXPECT_NS_EQUAL(convertedRules[1], sortingRule);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, UpgradeSchemeForMainFrameRuleConversion)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"priority": @1,
         @"action": @{ @"type": @"upgradeScheme" },
         @"condition": @{
             @"urlFilter": @"crouton.net",
             @"resourceTypes": @[ @"main_frame" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     NSArray<NSDictionary *> *convertedRules = validatedRule.ruleInWebKitFormat;
     EXPECT_EQ(convertedRules.count, 2ul);

     NSDictionary *makeHTTPSRule = @{
         @"action": @{
             @"type": @"make-https",
         },
         @"trigger": @{
             @"url-filter": @"crouton\\.net",
             @"resource-type": @[ @"top-document" ],
         },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
         @"_identifier": @1,
         @"_rulesetIdentifier": @"Test Ruleset",
 #endif
     };
     EXPECT_NS_EQUAL(convertedRules[0], makeHTTPSRule);

     NSDictionary *sortingRule = @{
         @"action": @{
             @"type": @"ignore-following-rules",
         },
         @"trigger": @{
             @"url-filter": @"crouton\\.net",
             @"resource-type": @[ @"top-document" ],
         },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
         @"_identifier": @1,
         @"_rulesetIdentifier": @"Test Ruleset",
 #endif
     };
     EXPECT_NS_EQUAL(convertedRules[1], sortingRule);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RuleWithoutAPriority)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"upgradeScheme" },
         @"condition": @{
             @"urlFilter": @"crouton.net",
             @"resourceTypes": @[ @"script" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     EXPECT_NOT_NULL(validatedRule);
     EXPECT_EQ(validatedRule.priority, 1);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RuleWithInvalidDomainType)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"allow" },
         @"condition": @{
             @"urlFilter": @"crouton.net",
             @"domainType": @"secondParty",
             @"resourceTypes": @[ @"ping" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     EXPECT_NULL(validatedRule);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RuleConversionWithDomainType)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"urlFilter": @"boatnerd.com",
             @"resourceTypes": @[ @"script" ],
             @"domainType": @"firstParty",
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     NSDictionary *convertedRule = validatedRule.ruleInWebKitFormat.firstObject;
     EXPECT_NOT_NULL(convertedRule);

     NSDictionary *correctRuleConversion = @{
         @"action": @{
             @"type": @"block",
         },
         @"trigger": @{
             @"url-filter": @"boatnerd\\.com",
             @"resource-type": @[ @"script" ],
             @"load-type": @[ @"first-party" ],
         },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
         @"_identifier": @1,
         @"_rulesetIdentifier": @"Test Ruleset",
 #endif
     };

     EXPECT_NS_EQUAL(convertedRule, correctRuleConversion);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RuleConversionWithNoSpecifiedResourceTypes)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"allow" },
         @"condition": @{
             @"regexFilter": @".*",
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     NSMutableDictionary *convertedRule = [validatedRule.ruleInWebKitFormat.firstObject mutableCopy];
     EXPECT_NOT_NULL(convertedRule);

     NSMutableDictionary *correctRuleConversion = [@{
         @"action": @{
             @"type": @"ignore-following-rules",
         },
         @"trigger": [@{
             @"url-filter": @".*",
             @"resource-type": @[ @"fetch", @"font", @"image", @"media", @"other", @"ping", @"script", @"style-sheet", @"websocket", @"child-document" ],
         } mutableCopy],
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
         @"_identifier": @1,
         @"_rulesetIdentifier": @"Test Ruleset",
 #endif
     } mutableCopy];
     NSSet *actualResourceTypes = [NSSet setWithArray:convertedRule[@"trigger"][@"resource-type"]];
     NSSet *expectedResourceTypes = [NSSet setWithArray:correctRuleConversion[@"trigger"][@"resource-type"]];
     EXPECT_NS_EQUAL(actualResourceTypes, expectedResourceTypes);

     convertedRule[@"trigger"][@"resource-type"] = nil;
     correctRuleConversion[@"trigger"][@"resource-type"] = nil;
     EXPECT_NS_EQUAL(convertedRule, correctRuleConversion);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RuleConversionWithUnsupportedResourceTypes)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"urlFilter": @".*",
             @"resourceTypes": @[ @"script", @"not_a_real_resource_type", @"font" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     NSDictionary *convertedRule = validatedRule.ruleInWebKitFormat.firstObject;
     EXPECT_NOT_NULL(convertedRule);

     NSSet *actualResourceTypes = [NSSet setWithArray:convertedRule[@"trigger"][@"resource-type"]];
     NSSet *expectedResourceTypes = [NSSet setWithArray:@[ @"script", @"font" ]];
     EXPECT_NS_EQUAL(actualResourceTypes, expectedResourceTypes);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RuleConversionWithExactlyOneUnsupportedResourceType)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"urlFilter": @".*",
             @"resourceTypes": @[ @"not_a_real_resource_type" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     NSDictionary *convertedRule = validatedRule.ruleInWebKitFormat.firstObject;
     EXPECT_NULL(convertedRule);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, EmptyResourceTypes)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"urlFilter": @".*",
             @"resourceTypes": @[ ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     EXPECT_NULL(validatedRule);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RuleConversionWithExcludedResourceTypes)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"urlFilter": @".*",
             @"excludedResourceTypes": @[ @"main_frame", @"sub_frame", @"font" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     NSDictionary *convertedRule = validatedRule.ruleInWebKitFormat.firstObject;
     EXPECT_NOT_NULL(convertedRule);

     NSSet *actualResourceTypes = [NSSet setWithArray:convertedRule[@"trigger"][@"resource-type"]];
     NSSet *expectedResourceTypes = [NSSet setWithArray:@[ @"fetch", @"image", @"media", @"other", @"ping", @"script", @"style-sheet", @"websocket" ]];
     EXPECT_NS_EQUAL(actualResourceTypes, expectedResourceTypes);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RuleConversionWithUnsupportedExcludedResourceTypes)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"urlFilter": @"*",
             @"excludedResourceTypes": @[ @"image", @"🦠" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     NSDictionary *convertedRule = validatedRule.ruleInWebKitFormat.firstObject;
     EXPECT_NOT_NULL(convertedRule);

     NSMutableDictionary *correctRuleConversion = [@{
         @"action": @{
             @"type": @"block",
         },
         @"trigger": [@{
             @"url-filter": @".*",
             @"resource-type": @[ @"fetch", @"font", @"media", @"other", @"ping", @"script", @"style-sheet", @"websocket", @"top-document", @"child-document" ],
         } mutableCopy],
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
         @"_identifier": @1,
         @"_rulesetIdentifier": @"Test Ruleset",
 #endif
     } mutableCopy];
     NSSet *actualResourceTypes = [NSSet setWithArray:convertedRule[@"trigger"][@"resource-type"]];
     NSSet *expectedResourceTypes = [NSSet setWithArray:correctRuleConversion[@"trigger"][@"resource-type"]];
     EXPECT_NS_EQUAL(actualResourceTypes, expectedResourceTypes);

     convertedRule[@"trigger"][@"resource-type"] = nil;
     correctRuleConversion[@"trigger"][@"resource-type"] = nil;
     EXPECT_NS_EQUAL(convertedRule, correctRuleConversion);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RuleConversionWithEmptyExcludedResourceTypes)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"urlFilter": @"*",
             @"excludedResourceTypes": @[ ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     NSMutableDictionary *convertedRule = [validatedRule.ruleInWebKitFormat.firstObject mutableCopy];
     EXPECT_NOT_NULL(convertedRule);

     NSDictionary *correctRuleConversion = [@{
         @"action": @{
             @"type": @"block",
         },
         @"trigger": [@{
             @"url-filter": @".*",
             @"resource-type": @[ @"fetch", @"font", @"image", @"media", @"other", @"ping", @"script", @"style-sheet", @"websocket", @"top-document", @"child-document" ],
         } mutableCopy],
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
         @"_identifier": @1,
         @"_rulesetIdentifier": @"Test Ruleset",
 #endif
     } mutableCopy];

     NSSet *actualResourceTypes = [NSSet setWithArray:convertedRule[@"trigger"][@"resource-type"]];
     NSSet *expectedResourceTypes = [NSSet setWithArray:correctRuleConversion[@"trigger"][@"resource-type"]];
     EXPECT_NS_EQUAL(actualResourceTypes, expectedResourceTypes);

     convertedRule[@"trigger"][@"resource-type"] = nil;
     correctRuleConversion[@"trigger"][@"resource-type"] = nil;
     EXPECT_NS_EQUAL(convertedRule, correctRuleConversion);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, EmptyDomains)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"urlFilter": @".*",
             @"domains": @[ ],
             @"resourceTypes": @[ @"font" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     EXPECT_NULL(validatedRule);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, NonASCIIDomains)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"urlFilter": @".*",
             @"domains": @[ @"🙃🙃🙃", @"apple.com" ],
             @"resourceTypes": @[ @"font" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     EXPECT_NULL(validatedRule);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RuleConversionWithDomains)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"domains": @[ @"apple.com", @"facebook.com", @"google.com" ],
             @"resourceTypes": @[ @"font" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     NSDictionary *convertedRule = validatedRule.ruleInWebKitFormat.firstObject;
     EXPECT_NOT_NULL(convertedRule);

     NSDictionary *correctRuleConversion = @{
         @"action": @{
             @"type": @"block",
         },
         @"trigger": @{
             @"if-domain": @[ @"*apple.com", @"*facebook.com", @"*google.com" ],
             @"resource-type": @[ @"font" ],
             @"url-filter": @".*",
         },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
         @"_identifier": @1,
         @"_rulesetIdentifier": @"Test Ruleset",
 #endif
     };

     EXPECT_NS_EQUAL(convertedRule, correctRuleConversion);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RuleConversionWithURLFilterAndRequestDomains)
 {
     __auto_type testPattern = ^(NSString *requestDomain, NSString *urlFilter, NSString *expectedRegexPattern) {
         NSMutableDictionary *rule = [@{
             @"id": @1,
             @"action": @{ @"type": @"block" },
             @"condition": [@{
                 @"resourceTypes": @[ @"script" ],
                 @"requestDomains": @[ requestDomain ],
             } mutableCopy],
         } mutableCopy];

         if (urlFilter)
             rule[@"condition"][@"urlFilter"] = urlFilter;

         _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
         NSDictionary *convertedRule = validatedRule.ruleInWebKitFormat.firstObject;
         EXPECT_NOT_NULL(convertedRule);

         NSDictionary *correctRuleConversion = @{
             @"action": @{
                 @"type": @"block",
             },
             @"trigger": @{
                 @"url-filter": expectedRegexPattern,
                 @"resource-type": @[ @"script" ],
             },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
         @"_identifier": @1,
         @"_rulesetIdentifier": @"Test Ruleset",
 #endif
         };

         EXPECT_NS_EQUAL(convertedRule, correctRuleConversion);
     };

     // No URL filter
     testPattern(@"apple.com", nil, @"^[^:]+://+([^:/]+\\.)?apple\\.com");

     // URL filter contains the request domain
     testPattern(@"com", @".com/foo/bar", @"^[^:]+://+([^:/]+\\.)?\\.com/foo/bar");

     // Part of the request domain is in the URL filter
     testPattern(@"foo.com", @"bar-*.com", @"^[^:]+://+([^:/]+\\.)?bar-.*foo\\.com");
     testPattern(@"foo.com", @"foo.*/bar/baz", @"^[^:]+://+([^:/]+\\.)?foo\\.com.*/bar/baz");

     // || or :// prefix in the URL filter
     testPattern(@"com", @"||foo", @"^[^:]+://+([^:/]+\\.)?foo.*com");
     testPattern(@"com", @"://www.", @"://www\\..*com");
     testPattern(@"com", @"://www.*", @"://www\\..*com");
     testPattern(@"com", @"://www./foo/bar", @"://www\\..*com/foo/bar");
     testPattern(@"com", @"://www.*/foo/bar", @"://www\\..*com/foo/bar");

     // Concatenating the request domain and URL filter
     testPattern(@"com", @"/foo/bar", @"^[^:]+://+([^:/]+\\.)?com.*/foo/bar");
     testPattern(@"com", @"&foo=bar|", @"^[^:]+://+([^:/]+\\.)?com.*&foo=bar$");
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RuleConversionWithRequestDomains)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             // Some extensions will have added leading * to match subdomains to work around Safari's bug in the past (rdar://113865040), make sure we still handle that case correctly.
             @"requestDomains": @[ @"apple.com", @"facebook.com", @"*google.com" ],
             @"resourceTypes": @[ @"font" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     NSArray<NSDictionary *> *convertedRules = validatedRule.ruleInWebKitFormat;
     EXPECT_EQ(convertedRules.count, 3ul);

     NSDictionary *appleURLFilterRuleConversion = @{
         @"action": @{
             @"type": @"block",
         },
         @"trigger": @{
             @"resource-type": @[ @"font" ],
             @"url-filter": @"^[^:]+://+([^:/]+\\.)?apple\\.com",
         },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
         @"_identifier": @1,
         @"_rulesetIdentifier": @"Test Ruleset",
 #endif
     };
     EXPECT_NS_EQUAL(convertedRules[0], appleURLFilterRuleConversion);

     NSDictionary *facebookURLFilterRuleConversion = @{
         @"action": @{
             @"type": @"block",
         },
         @"trigger": @{
             @"resource-type": @[ @"font" ],
             @"url-filter": @"^[^:]+://+([^:/]+\\.)?facebook\\.com",
         },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
         @"_identifier": @1,
         @"_rulesetIdentifier": @"Test Ruleset",
 #endif
     };
     EXPECT_NS_EQUAL(convertedRules[1], facebookURLFilterRuleConversion);

     NSDictionary *googleURLFilterRuleConversion = @{
         @"action": @{
             @"type": @"block",
         },
         @"trigger": @{
             @"resource-type": @[ @"font" ],
             @"url-filter": @"^[^:]+://+([^:/]+\\.)?.*google\\.com",
         },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
         @"_identifier": @1,
         @"_rulesetIdentifier": @"Test Ruleset",
 #endif
     };
     EXPECT_NS_EQUAL(convertedRules[2], googleURLFilterRuleConversion);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RuleConversionWithInitiatorDomains)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"initiatorDomains": @[ @"apple.com", @"facebook.com", @"google.com" ],
             @"resourceTypes": @[ @"font" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     NSDictionary *convertedRule = validatedRule.ruleInWebKitFormat.firstObject;
     EXPECT_NOT_NULL(convertedRule);

     NSDictionary *correctRuleConversion = @{
         @"action": @{
             @"type": @"block",
         },
         @"trigger": @{
             @"if-frame-url": @[ @"^[^:]+://+([^:/]+\\.)?apple\\.com/.*", @"^[^:]+://+([^:/]+\\.)?facebook\\.com/.*", @"^[^:]+://+([^:/]+\\.)?google\\.com/.*" ],
             @"resource-type": @[ @"font" ],
             @"url-filter": @".*",
         },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
         @"_identifier": @1,
         @"_rulesetIdentifier": @"Test Ruleset",
 #endif
     };

     EXPECT_NS_EQUAL(convertedRule, correctRuleConversion);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RuleConversionWithExcludedInitiatorDomains)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"excludedInitiatorDomains": @[ @"apple.com", @"facebook.com", @"google.com" ],
             @"resourceTypes": @[ @"font" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     NSDictionary *convertedRule = validatedRule.ruleInWebKitFormat.firstObject;
     EXPECT_NOT_NULL(convertedRule);

     NSDictionary *correctRuleConversion = @{
         @"action": @{
             @"type": @"block",
         },
         @"trigger": @{
             @"unless-frame-url": @[ @"^[^:]+://+([^:/]+\\.)?apple\\.com/.*", @"^[^:]+://+([^:/]+\\.)?facebook\\.com/.*", @"^[^:]+://+([^:/]+\\.)?google\\.com/.*" ],
             @"resource-type": @[ @"font" ],
             @"url-filter": @".*",
         },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
         @"_identifier": @1,
         @"_rulesetIdentifier": @"Test Ruleset",
 #endif
     };

     EXPECT_NS_EQUAL(convertedRule, correctRuleConversion);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RuleConversionWithExcludedInitiatorDomainsAndInitiatorDomains)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"initiatorDomains": @[ @"example.com" ],
             @"excludedInitiatorDomains": @[ @"blog.example.com" ],
             @"resourceTypes": @[ @"font" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     NSArray *convertedRules = validatedRule.ruleInWebKitFormat;
     EXPECT_NOT_NULL(convertedRules);

     NSArray *correctRuleConversion = @[
         @{
             @"action": @{
                 @"type": @"ignore-following-rules",
             },
             @"trigger": @{
                 @"if-frame-url": @[ @"^[^:]+://+([^:/]+\\.)?blog\\.example\\.com/.*" ],
                 @"resource-type": @[ @"font" ],
                 @"url-filter": @".*",
             },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
             @"_identifier": @1,
             @"_rulesetIdentifier": @"Test Ruleset",
 #endif
         },
         @{
             @"action": @{
                 @"type": @"block",
             },
             @"trigger": @{
                 @"if-frame-url": @[ @"^[^:]+://+([^:/]+\\.)?example\\.com/.*" ],
                 @"resource-type": @[ @"font" ],
                 @"url-filter": @".*",
             },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
             @"_identifier": @1,
             @"_rulesetIdentifier": @"Test Ruleset",
 #endif
         }
     ];

     EXPECT_NS_EQUAL(convertedRules, correctRuleConversion);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RuleConversionWithEmptyExcludedDomains)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"excludedDomains": @[ ],
             @"resourceTypes": @[ @"media" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     NSDictionary *convertedRule = validatedRule.ruleInWebKitFormat.firstObject;
     EXPECT_NOT_NULL(convertedRule);

     NSDictionary *correctRuleConversion = @{
         @"action": @{
             @"type": @"block",
         },
         @"trigger": @{
             @"unless-domain": @[ ],
             @"resource-type": @[ @"media" ],
             @"url-filter": @".*",
         },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
         @"_identifier": @1,
         @"_rulesetIdentifier": @"Test Ruleset",
 #endif
     };

     EXPECT_NS_EQUAL(convertedRule, correctRuleConversion);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, NonASCIIExcludedDomains)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"urlFilter": @".*",
             @"domains": @[ @"🧭" ],
             @"resourceTypes": @[ @"font" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     EXPECT_NULL(validatedRule);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RuleConversionWithExcludedDomains)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"excludedDomains": @[ @"apple.com" ],
             @"resourceTypes": @[ @"media" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     NSDictionary *convertedRule = validatedRule.ruleInWebKitFormat.firstObject;
     EXPECT_NOT_NULL(convertedRule);

     NSDictionary *correctRuleConversion = @{
         @"action": @{
             @"type": @"block",
         },
         @"trigger": @{
             @"unless-domain": @[ @"*apple.com" ],
             @"resource-type": @[ @"media" ],
             @"url-filter": @".*",
         },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
         @"_identifier": @1,
         @"_rulesetIdentifier": @"Test Ruleset",
 #endif
     };

     EXPECT_NS_EQUAL(convertedRule, correctRuleConversion);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RuleConversionWithExcludedRequestDomains)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"excludedRequestDomains": @[ @"apple.com" ],
             @"resourceTypes": @[ @"media" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     NSArray<NSDictionary *> *convertedRules = validatedRule.ruleInWebKitFormat;
     EXPECT_EQ(convertedRules.count, 2ul);

     NSDictionary *passRuleConversion = @{
         @"action": @{
             @"type": @"ignore-following-rules",
         },
         @"trigger": @{
             @"resource-type": @[ @"media" ],
             @"url-filter": @"apple\\.com",
         },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
         @"_identifier": @1,
         @"_rulesetIdentifier": @"Test Ruleset",
 #endif
     };
     EXPECT_NS_EQUAL(convertedRules[0], passRuleConversion);

     NSDictionary *blockRuleConversion = @{
         @"action": @{
             @"type": @"block",
         },
         @"trigger": @{
             @"resource-type": @[ @"media" ],
             @"url-filter": @".*",
         },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
         @"_identifier": @1,
         @"_rulesetIdentifier": @"Test Ruleset",
 #endif
     };
     EXPECT_NS_EQUAL(convertedRules[1], blockRuleConversion);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RuleConversionWithInvalidRequestMethods)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"requestMethods": @[ @"bad" ],
             @"resourceTypes": @[ @"main_frame" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     EXPECT_NULL(validatedRule);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RuleConversionWithInvalidExcludedRequestMethods)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"excludedRequestMethods": @[ @"bad" ],
             @"resourceTypes": @[ @"main_frame" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     EXPECT_NULL(validatedRule);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RuleConversionWithRequestMethods)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"requestMethods": @[ @"get", @"post" ],
             @"resourceTypes": @[ @"main_frame" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     NSArray *convertedRules = validatedRule.ruleInWebKitFormat;
     EXPECT_NOT_NULL(convertedRules);

     NSArray *correctRuleConversion = @[
         @{
             @"action": @{
                 @"type": @"block",
             },
             @"trigger": @{
                 @"url-filter": @".*",
                 @"resource-type": @[ @"top-document" ],
                 @"request-method": @"get",
             },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
             @"_identifier": @1,
             @"_rulesetIdentifier": @"Test Ruleset",
 #endif
         },
         @{
             @"action": @{
                 @"type": @"block",
             },
             @"trigger": @{
                 @"url-filter": @".*",
                 @"resource-type": @[ @"top-document" ],
                 @"request-method": @"post",
             },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
             @"_identifier": @1,
             @"_rulesetIdentifier": @"Test Ruleset",
 #endif
         }
     ];

     EXPECT_NS_EQUAL(convertedRules, correctRuleConversion);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RuleConversionWithExcludedRequestMethods)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"excludedRequestMethods": @[ @"get", @"post" ],
             @"resourceTypes": @[ @"main_frame" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     NSArray *convertedRules = validatedRule.ruleInWebKitFormat;
     EXPECT_NOT_NULL(convertedRules);

     NSArray *correctRuleConversion = @[
         @{
             @"action": @{
                 @"type": @"ignore-following-rules",
             },
             @"trigger": @{
                 @"url-filter": @".*",
                 @"resource-type": @[ @"top-document" ],
                 @"request-method": @"get",
             },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
             @"_identifier": @1,
             @"_rulesetIdentifier": @"Test Ruleset",
 #endif
         },
         @{
             @"action": @{
                 @"type": @"ignore-following-rules",
             },
             @"trigger": @{
                 @"url-filter": @".*",
                 @"resource-type": @[ @"top-document" ],
                 @"request-method": @"post",
             },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
             @"_identifier": @1,
             @"_rulesetIdentifier": @"Test Ruleset",
 #endif
         },
         @{
             @"action": @{
                 @"type": @"block",
             },
             @"trigger": @{
                 @"url-filter": @".*",
                 @"resource-type": @[ @"top-document" ],
             },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
             @"_identifier": @1,
             @"_rulesetIdentifier": @"Test Ruleset",
 #endif
         }
     ];

     EXPECT_NS_EQUAL(convertedRules, correctRuleConversion);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RuleConversionWithRequestMethodsAndExcludedRequestMethodsAndRequestDomainsAndExcludedRequestDomains)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"requestDomains": @[ @"apple.com" ],
             @"excludedRequestDomains": @[ @"google.com" ],
             @"requestMethods": @[ @"get" ],
             @"excludedRequestMethods": @[ @"post" ],
             @"resourceTypes": @[ @"main_frame" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     NSArray *convertedRules = validatedRule.ruleInWebKitFormat;
     EXPECT_NOT_NULL(convertedRules);

     NSArray *correctRuleConversion = @[
         @{
             @"action": @{
                 @"type": @"ignore-following-rules",
             },
             @"trigger": @{
                 @"url-filter": @"google\\.com",
                 @"resource-type": @[ @"top-document" ],
                 @"request-method": @"post",
             },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
             @"_identifier": @1,
             @"_rulesetIdentifier": @"Test Ruleset",
 #endif
         },
         @{
             @"action": @{
                 @"type": @"block",
             },
             @"trigger": @{
                 @"url-filter": @"^[^:]+://+([^:/]+\\.)?apple\\.com",
                 @"resource-type": @[ @"top-document" ],
                 @"request-method": @"get",
             },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
             @"_identifier": @1,
             @"_rulesetIdentifier": @"Test Ruleset",
 #endif
         }
     ];

     EXPECT_NS_EQUAL(convertedRules, correctRuleConversion);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, NonASCIIURLFilter)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"urlFilter": @"🔮.com",
             @"resourceTypes": @[ @"script" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     EXPECT_NULL(validatedRule);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, NonASCIIRegexFilter)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"block" },
         @"condition": @{
             @"regexFilter": @"〽️.com",
             @"resourceTypes": @[ @"script" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     EXPECT_NULL(validatedRule);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, URLFilterSpecialCharacters)
 {
     __auto_type testPattern = ^(NSString *chromePattern, NSString *expectedRegexPattern) {
         NSDictionary *rule = @{
             @"id": @1,
             @"action": @{ @"type": @"block" },
             @"condition": @{
                 @"urlFilter": chromePattern,
                 @"resourceTypes": @[ @"script" ],
             },
         };

         _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
         NSDictionary *convertedRule = validatedRule.ruleInWebKitFormat.firstObject;
         EXPECT_NOT_NULL(convertedRule);

         NSDictionary *correctRuleConversion = @{
             @"action": @{
                 @"type": @"block",
             },
             @"trigger": @{
                 @"url-filter": expectedRegexPattern,
                 @"resource-type": @[ @"script" ],
             },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
             @"_identifier": @1,
             @"_rulesetIdentifier": @"Test Ruleset",
 #endif
         };

         EXPECT_NS_EQUAL(convertedRule, correctRuleConversion);
     };

     // Testing domain anchor.
     testPattern(@"||apple.com", @"^[^:]+://+([^:/]+\\.)?apple\\.com");
     testPattern(@"apple||.com", @"apple\\|\\|\\.com");

     // Testing start and end anchors.
     testPattern(@"|apple|.com|", @"^apple\\|\\.com$");
     testPattern(@"|apple.com", @"^apple\\.com");
     testPattern(@"apple.com|", @"apple\\.com$");
     testPattern(@"apple|com", @"apple\\|com");

     // Testing wildcard.
     testPattern(@"*apple.com", @".*apple\\.com");
     testPattern(@"*apple*com", @".*apple.*com");
     testPattern(@"apple.com*", @"apple\\.com.*");

     // Testing separator character.
     testPattern(@"apple^com", @"apple[^a-zA-Z0-9_.%-]com");
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, UnacceptableResourceTypeForAllowAllRequests)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"allowAllRequests" },
         @"condition": @{
             @"urlFilter": @"apple.com",
             @"resourceTypes": @[ @"main_frame", @"script" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     EXPECT_NULL(validatedRule);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, ExcludedResourceTypeForAllowAllRequests)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"allowAllRequests" },
         @"condition": @{
             @"urlFilter": @"apple.com",
             @"excludedResourceTypes": @[ @"sub_frame", @"stylesheet", @"script", @"image", @"font", @"object", @"xmlhttprequest", @"ping", @"csp_report", @"media", @"websocket", @"other"],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     EXPECT_NULL(validatedRule);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, NoResourceTypeForAllowAllRequests)
 {
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"allowAllRequests" },
         @"condition": @{
             @"urlFilter": @"apple.com",
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     EXPECT_NULL(validatedRule);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RuleConversionWithMainFrameAllowAllRequests)
 {
     // FIXME: rdar://154124673 (Write tests for sub_frame allowAllRequests rules)
     NSDictionary *rule = @{
         @"id": @1,
         @"action": @{ @"type": @"allowAllRequests" },
         @"condition": @{
             @"urlFilter": @"apple.com",
             @"resourceTypes": @[ @"main_frame" ]
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     NSMutableDictionary *convertedRule = [validatedRule.ruleInWebKitFormat.firstObject mutableCopy];
     EXPECT_NOT_NULL(convertedRule);

     NSMutableDictionary *correctRuleConversion = [@{
         @"action": @{
             @"type": @"ignore-following-rules",
         },
         @"trigger": [@{
             @"url-filter": @".*",
             @"if-top-url": @[ @"apple\\.com" ],
         } mutableCopy],
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
         @"_identifier": @1,
         @"_rulesetIdentifier": @"Test Ruleset",
 #endif
     } mutableCopy];

     EXPECT_NS_EQUAL(convertedRule, correctRuleConversion);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RuleConversionWithRedirect)
 {
     __auto_type testRedirect = ^(NSDictionary<NSString *, id> *inputRedirect, NSDictionary<NSString *, id> *expectedRedirect) {
         NSDictionary *rule = @{
             @"id": @1,
             @"action": @{
                 @"type": @"redirect",
                 @"redirect": inputRedirect,
             },
             @"condition": @{
                 @"regexFilter": @".*",
                 @"resourceTypes": @[ @"script" ],
             },
         };

         _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
         NSDictionary *convertedRule = validatedRule.ruleInWebKitFormat.firstObject;

         if (!expectedRedirect) {
             EXPECT_NULL(convertedRule);
             return;
         }

         EXPECT_NOT_NULL(convertedRule);

         NSDictionary *correctRuleConversion = @{
             @"action": @{
                 @"type": @"redirect",
                 @"redirect": expectedRedirect,
             },
             @"trigger": @{
                 @"url-filter": @".*",
                 @"resource-type": @[ @"script" ],
             },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
             @"_identifier": @1,
             @"_rulesetIdentifier": @"Test Ruleset",
 #endif
         };

         EXPECT_NS_EQUAL(convertedRule, correctRuleConversion);
     };

     testRedirect(@{ }, nil);

     testRedirect(@{ @"url": @"" }, nil);
     testRedirect(@{ @"url": @[ ] }, nil);
     testRedirect(@{ @"url": @"ftp://example.com" }, nil);
     testRedirect(@{ @"url": @"https://example.com" }, @{ @"url": @"https://example.com" });

     testRedirect(@{ @"extensionPath": @"" }, nil);
     testRedirect(@{ @"extensionPath": @[ ] }, nil);
     testRedirect(@{ @"extensionPath": @"foo.js" }, nil);
     testRedirect(@{ @"extensionPath": @"/foo.js" }, @{ @"extension-path": @"/foo.js" });

     testRedirect(@{ @"regexSubstitution": @"" }, nil);
     testRedirect(@{ @"regexSubstitution": @[ ] }, nil);
     testRedirect(@{ @"regexSubstitution": @"http://example.com/\\1" }, @{ @"regex-substitution": @"http://example.com/\\1" });

     testRedirect(@{ @"transform": @"" }, nil);
     testRedirect(@{ @"transform": @[ ] }, nil);
     testRedirect(@{ @"transform": @{ } }, nil);
     testRedirect(@{ @"transform": @{ @"scheme": @"https", @"host": @"new.example.com" } }, @{ @"transform": @{ @"scheme": @"https", @"host": @"new.example.com" } });
     testRedirect(@{ @"transform": @{ @"username": @"foo", @"password": @"bar" } }, @{ @"transform": @{ @"username": @"foo", @"password": @"bar" } });
     testRedirect(@{ @"transform": @{ @"query": @"foo" } }, @{ @"transform": @{ @"query": @"foo" } });

     testRedirect(@{ @"transform": @{ @"queryTransform": @"" } }, nil);
     testRedirect(@{ @"transform": @{ @"queryTransform": @[ ] } }, nil);
     testRedirect(@{ @"transform": @{ @"queryTransform": @{ } } }, nil);
     testRedirect(@{ @"transform": @{ @"queryTransform": @{ @"addOrReplaceParams": @"" } } }, nil);
     testRedirect(@{ @"transform": @{ @"queryTransform": @{ @"addOrReplaceParams": @[ ] } } }, nil);
     testRedirect(@{ @"transform": @{ @"queryTransform": @{ @"addOrReplaceParams": @[ @{ } ] } } }, nil);
     testRedirect(@{ @"transform": @{ @"queryTransform": @{ @"addOrReplaceParams": @[ @{ @"key": @"foo" } ] } } }, nil);
     testRedirect(@{ @"transform": @{ @"queryTransform": @{ @"addOrReplaceParams": @[ @{ @"replaceOnly": @"" } ] } } }, nil);
     testRedirect(@{ @"transform": @{ @"queryTransform": @{ @"removeParams": @"" } } }, nil);
     testRedirect(@{ @"transform": @{ @"queryTransform": @{ @"removeParams": @[ ] } } }, nil);
     testRedirect(@{ @"transform": @{ @"queryTransform": @{ @"addOrReplaceParams": @[ @{ @"key": @"foo", @"value": @"bar" } ] } } }, @{ @"transform": @{ @"query-transform": @{ @"add-or-replace-parameters": @[ @{ @"key": @"foo", @"value": @"bar" } ] } } });
     testRedirect(@{ @"transform": @{ @"queryTransform": @{ @"addOrReplaceParams": @[ @{ @"key": @"foo", @"value": @"bar", @"replaceOnly": @YES } ] } } }, @{ @"transform": @{ @"query-transform": @{ @"add-or-replace-parameters": @[ @{ @"key": @"foo", @"value": @"bar", @"replace-only": @YES } ] } } });
     testRedirect(@{ @"transform": @{ @"queryTransform": @{ @"removeParams": @[ @"foo" ] } } }, @{ @"transform": @{ @"query-transform": @{ @"remove-parameters": @[ @"foo" ] } } });
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RuleConversionWithModifyHeaders)
 {
     __auto_type testModifyHeaders = ^(NSString *inputHeaderType, NSArray<NSDictionary *> *inputModifyHeadersInfo, NSString *expectedHeaderType, NSArray<NSDictionary *> *expectedModifyHeadersInfo) {
         NSDictionary *rule = @{
             @"id": @10,
             @"priority": @2,
             @"action": @{
                 @"type": @"modifyHeaders",
                 inputHeaderType: inputModifyHeadersInfo,
             },
             @"condition": @{
                 @"urlFilter": @"*",
                 @"resourceTypes": @[ @"script" ],
             },
         };

         _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
         NSDictionary *convertedRule = validatedRule.ruleInWebKitFormat.firstObject;

         if (!expectedModifyHeadersInfo) {
             EXPECT_NULL(convertedRule);
             return;
         }

         EXPECT_NOT_NULL(convertedRule);

         NSDictionary *correctRuleConversion = @{
             @"action": @{
                 @"type": @"modify-headers",
                 @"priority": @2,
                 expectedHeaderType: expectedModifyHeadersInfo,
             },
             @"trigger": @{
                 @"url-filter": @".*",
                 @"resource-type": @[ @"script" ],
             },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
             @"_identifier": @10,
             @"_rulesetIdentifier": @"Test Ruleset",
 #endif
         };

         EXPECT_NS_EQUAL(convertedRule, correctRuleConversion);
     };

     testModifyHeaders(@"responseHeaders", @[ ], nil, nil);
     testModifyHeaders(@"responseHeaders", @[ @{ } ], nil, nil);
     testModifyHeaders(@"requestHeaders", @[ @{ } ], nil, nil);
     testModifyHeaders(@"responseHeaders", @[ @{ @"wrong dictionary structure": @[ @{ } ] } ], nil, nil);
     testModifyHeaders(@"responseHeaders", @[ @{ @"header": @"accept", @"operation": @"invalid header operation", @"value": @"v1" } ], nil, nil);
     testModifyHeaders(@"responseHeaders", @[ @{ @"operation": @"set", @"value": @"v1" } ], nil, nil);
     testModifyHeaders(@"responseHeaders", @[ @{ @"header": @"accept", @"operation": @"set" } ], nil, nil);
     testModifyHeaders(@"responseHeaders", @[ @{ @"header": @"accept", @"operation": @"append" } ], nil, nil);
     testModifyHeaders(@"responseHeaders", @[ @{ @"header": @"accept", @"operation": @"remove", @"value": @"v1" } ], nil, nil);
     testModifyHeaders(@"requestHeaders", @[ @{ @"operation": @"set", @"value": @"v1" } ], nil, nil);
     testModifyHeaders(@"requestHeaders", @[ @{ @"header": @"ellie's custom header", @"operation": @"set", @"value": @"v1" } ], nil, nil);

     testModifyHeaders(@"requestHeaders", @[ @{ @"header": @"accept", @"operation": @"set", @"value": @"v1" } ], @"request-headers", @[ @{ @"header": @"accept", @"operation": @"set", @"value": @"v1" } ]);
     testModifyHeaders(@"requestHeaders", @[ @{ @"header": @"accept", @"operation": @"remove" } ],  @"request-headers", @[ @{ @"header": @"accept", @"operation": @"remove" } ]);
     testModifyHeaders(@"requestHeaders", @[ @{ @"header": @"accept", @"operation": @"append", @"value": @"v1" } ], @"request-headers", @[ @{ @"header": @"accept", @"operation": @"append", @"value": @"v1" } ]);
     testModifyHeaders(@"requestHeaders", @[ @{ @"header": @"accept", @"operation": @"append", @"value": @"v1" }, @{ @"header": @"accept", @"operation": @"set", @"value": @"v1" } ], @"request-headers", @[ @{ @"header": @"accept", @"operation": @"append", @"value": @"v1" }, @{ @"header": @"accept", @"operation": @"set", @"value": @"v1" } ]);
     testModifyHeaders(@"responseHeaders", @[ @{ @"header": @"accept", @"operation": @"set", @"value": @"v1" } ], @"response-headers", @[ @{ @"header": @"accept", @"operation": @"set", @"value": @"v1" } ]);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RuleConversionWithModifyHeadersWithBothResponseAndRequestHeaders)
 {
     NSDictionary *rule = @{
         @"id": @10,
         @"action": @{
             @"type": @"modifyHeaders",
             @"responseHeaders": @[
                 @{ @"header": @"age", @"operation": @"set", @"value": @"5" },
                 @{ @"header": @"date", @"operation": @"remove" },
             ],
             @"requestHeaders": @[
                 @{ @"header": @"cache-control", @"operation": @"set", @"value": @"something" },
                 @{ @"header": @"Cookie", @"operation": @"remove" },
             ],
         },
         @"condition": @{
             @"urlFilter": @"*",
             @"resourceTypes": @[ @"script" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     NSDictionary *convertedRule = validatedRule.ruleInWebKitFormat.firstObject;
     EXPECT_NOT_NULL(convertedRule);

     NSDictionary *correctRuleConversion = @{
         @"action": @{
             @"type": @"modify-headers",
             @"priority": @1,
             @"response-headers": @[
                 @{ @"header": @"age", @"operation": @"set", @"value": @"5" },
                 @{ @"header": @"date", @"operation": @"remove" },
             ],
             @"request-headers": @[
                 @{ @"header": @"cache-control", @"operation": @"set", @"value": @"something" },
                 @{ @"header": @"Cookie", @"operation": @"remove" },
             ],
         },
         @"trigger": @{
             @"url-filter": @".*",
             @"resource-type": @[ @"script" ],
         },
 #if ENABLE(DNR_ON_RULE_MATCHED_DEBUG)
         @"_identifier": @10,
         @"_rulesetIdentifier": @"Test Ruleset",
 #endif
     };

     EXPECT_NS_EQUAL(convertedRule, correctRuleConversion);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RuleConversionWithModifyHeadersWithoutAnyHeadersSpecified)
 {
     NSDictionary *rule = @{
         @"id": @10,
         @"priority": @2,
         @"action": @{
             @"type": @"modifyHeaders",
         },
         @"condition": @{
             @"urlFilter": @"*",
             @"resourceTypes": @[ @"script" ],
         },
     };

     _WKWebExtensionDeclarativeNetRequestRule *validatedRule = [[_WKWebExtensionDeclarativeNetRequestRule alloc] initWithDictionary:rule rulesetID:@"Test Ruleset" errorString:nil];
     NSDictionary *convertedRule = validatedRule.ruleInWebKitFormat.firstObject;
     EXPECT_NULL(convertedRule);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RulesSortByPriorityFromDifferentRulesets)
 {
     NSDictionary *rules = @{
         @"Test Ruleset 1": @[ @{
             @"id": @1,
             @"priority": @2,
             @"action": @{ @"type": @"allow" },
             @"condition": @{
                 @"regexFilter": @"apple.com",
                 @"resourceTypes": @[ @"script" ],
             },
         } ],
         @"Test Ruleset 2": @[ @{
             @"id": @1,
             @"priority": @1,
             @"action": @{ @"type": @"block" },
             @"condition": @{
                 @"regexFilter": @"bananas.com",
                 @"resourceTypes": @[ @"script" ],
             },
         } ],
     };

     NSArray *sortedTranslatedRules = [_WKWebExtensionDeclarativeNetRequestTranslator translateRules:rules errorStrings:nil];
     EXPECT_NOT_NULL(sortedTranslatedRules);

     EXPECT_NS_EQUAL(sortedTranslatedRules[0][@"action"][@"type"], @"ignore-following-rules");
     EXPECT_NS_EQUAL(sortedTranslatedRules[1][@"action"][@"type"], @"block");
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RulesSortWithoutExplicitPriority)
 {
     NSDictionary *rules = @{
         @"Test Ruleset": @[
             @{
                 @"id": @1,
                 @"action": @{ @"type": @"upgradeScheme" },
                 @"condition": @{
                     @"regexFilter": @"bananas.com",
                     @"resourceTypes": @[ @"script" ],
                 },
             },
             @{
                 @"id": @1,
                 @"priority": @3,
                 @"action": @{ @"type": @"block" },
                 @"condition": @{
                     @"regexFilter": @"bananas.com",
                     @"resourceTypes": @[ @"script" ],
                 },
             },
         ]
     };

     NSArray *sortedTranslatedRules = [_WKWebExtensionDeclarativeNetRequestTranslator translateRules:rules errorStrings:nil];
     EXPECT_NOT_NULL(sortedTranslatedRules);

     EXPECT_NS_EQUAL(sortedTranslatedRules[0][@"action"][@"type"], @"block");
     EXPECT_NS_EQUAL(sortedTranslatedRules[1][@"action"][@"type"], @"make-https");
     EXPECT_NS_EQUAL(sortedTranslatedRules[2][@"action"][@"type"], @"ignore-following-rules");
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RulesSortByActionType)
 {
     NSDictionary *rules = @{
         @"Test Ruleset": @[
             @{
                 @"id": @1,
                 @"action": @{ @"type": @"upgradeScheme" },
                 @"condition": @{
                     @"regexFilter": @"bananas.com",
                     @"resourceTypes": @[ @"script" ],
                 },
             },
             @{
                 @"id": @1,
                 @"action": @{ @"type": @"allowAllRequests" },
                 @"condition": @{
                     @"regexFilter": @"bananas.com",
                     @"resourceTypes": @[ @"main_frame" ],
                 },
             },
             @{
                 @"id": @1,
                 @"action": @{ @"type": @"allow" },
                 @"condition": @{
                     @"regexFilter": @"bananas.com",
                     @"resourceTypes": @[ @"script" ],
                 },
             },
             @{
                 @"id": @1,
                 @"action": @{ @"type": @"block" },
                 @"condition": @{
                     @"regexFilter": @"bananas.com",
                     @"resourceTypes": @[ @"script" ],
                 },
             },
             @{
                 @"id": @1,
                 @"action": @{
                     @"type": @"modifyHeaders",
                     @"requestHeaders": @[
                         @{ @"header": @"DNT", @"operation": @"set", @"value": @"1" },
                     ],
                 },
                 @"condition": @{
                     @"regexFilter": @"bananas.com",
                     @"resourceTypes": @[ @"script" ],
                 },
             },
         ]
     };

     NSArray *sortedTranslatedRules = [_WKWebExtensionDeclarativeNetRequestTranslator translateRules:rules errorStrings:nil];
     EXPECT_NOT_NULL(sortedTranslatedRules);

     EXPECT_NS_EQUAL(sortedTranslatedRules[0][@"action"][@"type"], @"ignore-following-rules");
     EXPECT_NS_EQUAL(sortedTranslatedRules[1][@"action"][@"type"], @"ignore-following-rules");
     EXPECT_NS_EQUAL(sortedTranslatedRules[2][@"action"][@"type"], @"block");
     EXPECT_NS_EQUAL(sortedTranslatedRules[3][@"action"][@"type"], @"make-https");
     EXPECT_NS_EQUAL(sortedTranslatedRules[4][@"action"][@"type"], @"ignore-following-rules");
     EXPECT_NS_EQUAL(sortedTranslatedRules[5][@"action"][@"type"], @"modify-headers");
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, RemoveAllContentRuleListsDoesNotRemoveWebExtensionRuleLists)
 {
     TestWebKitAPI::HTTPServer server({
         { "/"_s, { { { "Content-Type"_s, "text/html"_s } }, "<iframe src='/frame.html'></iframe>"_s } },
         { "/frame.html"_s, { { { "Content-Type"_s, "text/html"_s } }, "<body style='background-color: blue'></body>"_s } },
     }, TestWebKitAPI::HTTPServer::Protocol::Http);

     auto *backgroundScript = Util::constructScript(@[
         @"browser.test.sendMessage('Remove RuleLists and Load Tab')"
     ]);

     auto *declarativeNetRequestManifest = @{
         @"manifest_version": @3,
         @"permissions": @[ @"declarativeNetRequest" ],
         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },
         @"declarative_net_request": @{
             @"rule_resources": @[
                 @{
                     @"id": @"blockFrame",
                     @"enabled": @YES,
                     @"path": @"rules.json"
                 }
             ]
         }
     };

     auto *rules = @"[ { \"id\" : 1, \"priority\": 1, \"action\" : { \"type\" : \"block\" }, \"condition\" : { \"urlFilter\" : \"frame\" } } ]";

     auto manager = Util::loadExtension(declarativeNetRequestManifest, @{ @"background.js": backgroundScript, @"rules.json": rules });

     [manager.get().context setPermissionStatus:WKWebExtensionContextPermissionStatusGrantedExplicitly forPermission:WKWebExtensionPermissionDeclarativeNetRequest];

     [manager runUntilTestMessage:@"Remove RuleLists and Load Tab"];

     [manager.get().defaultTab.webView.configuration.userContentController removeAllContentRuleLists];

     auto webView = manager.get().defaultTab.webView;
     auto navigationDelegate = adoptNS([TestNavigationDelegate new]);

     __block bool receivedActionNotification { false };
     navigationDelegate.get().contentRuleListPerformedAction = ^(WKWebView *, NSString *identifier, _WKContentRuleListAction *action, NSURL *url) {
         receivedActionNotification = true;
     };

     webView.navigationDelegate = navigationDelegate.get();

     [webView loadRequest:server.requestWithLocalhost()];

     Util::run(&receivedActionNotification);
 }

 TEST(WKWebExtensionAPIDeclarativeNetRequest, MigrateDeclarativeNetRequestDataToNewFormat)
 {
     auto *backgroundScript = Util::constructScript(@[
         @"var expectedResults = [{",
         @"  'id': 1,",
         @"  'condition': {",
         @"      'urlFilter': 'blocksub'",
         @"  },",
         @"  'action': {",
         @"      'type': 'block'",
         @"  }",
         @"}]",

         @"var results",
         @"results = await browser.declarativeNetRequest.getDynamicRules()",

         @"browser.test.assertDeepEq(results, expectedResults)",

         @"browser.test.notifyPass()",
     ]);

     static auto *resources = @{
         @"background.js": backgroundScript,
     };

     auto *declarativeNetRequestManifest = @{
         @"manifest_version": @3,
         @"permissions": @[ @"declarativeNetRequest" ],
         @"background": @{ @"scripts": @[ @"background.js" ], @"type": @"module", @"persistent": @NO },
     };

     auto manager = Util::parseExtension(declarativeNetRequestManifest, resources, WKWebExtensionControllerConfiguration._temporaryConfiguration);

     // Give the extension a unique identifier so it opts into saving data in the temporary configuration.
     manager.get().context.uniqueIdentifier = @"org.webkit.test.extension (76C788B8)";

     [manager load];

     auto *storageDirectory = manager.get().controller.configuration._storageDirectoryPath;
     storageDirectory = [storageDirectory stringByAppendingPathComponent:manager.get().context.uniqueIdentifier];

     static auto *files = @[
         [NSBundle.test_resourcesBundle URLForResource:@"DeclarativeNetRequestRules" withExtension:@"db"],
         [NSBundle.test_resourcesBundle URLForResource:@"DeclarativeNetRequestRules" withExtension:@"db-shm"],
         [NSBundle.test_resourcesBundle URLForResource:@"DeclarativeNetRequestRules" withExtension:@"db-wal"]
     ];

     for (NSURL *file in files) {
         NSString *combinedPath = [storageDirectory stringByAppendingPathComponent:[file lastPathComponent]];
         [NSFileManager.defaultManager copyItemAtURL:file toURL:[NSURL fileURLWithPath:combinedPath] error:nil];
     }

     [manager run];
 }

 } // namespace TestWebKitAPI

 #endif // ENABLE(WK_WEB_EXTENSIONS)