| <!doctype html> |
| <title>Cross-Origin-Opener-Policy and Cross-Origin-Embedder-Policy: a navigating popup</title> |
| <meta name=timeout content=long> |
| <meta name=variant content=?0-1> |
| <meta name=variant content=?2-3> |
| <meta name=variant content=?4-last> |
| <script src=/resources/testharness.js></script> |
| <script src=/resources/testharnessreport.js></script> |
| <script src=/common/subset-tests.js></script> |
| <script src=/common/get-host-info.sub.js></script> |
| <script src=/common/utils.js></script> |
| <script src=resources/common.js></script> |
| <script src=/common/dispatcher/dispatcher.js></script> |
| <script> |
| [ |
| { |
| "title": "coop/coep", |
| "coop": "same-origin", |
| "coep": "require-corp", |
| "opener": true |
| }, |
| { |
| "title": "no coop/coep", |
| "coop": "", |
| "coep": "require-corp", |
| "opener": false |
| }, |
| { |
| "title": "coop/no coep", |
| "coop": "same-origin", |
| "coep": "", |
| "opener": false |
| }, |
| { |
| "title": "no coop/no coep", |
| "coop": "", |
| "coep": "", |
| "opener": false |
| }, |
| { |
| "title": "coop unsafe-none/coep", |
| "coop": "unsafe-none", |
| "coep": "require-corp", |
| "opener": false |
| }, |
| { |
| "title": "coop unsafe-none/no coep", |
| "coop": "unsafe-none", |
| "coep": "", |
| "opener": false |
| } |
| ].forEach((variant, i) => { |
| // Only run specified variants |
| if (!shouldRunSubTest(i)) { |
| return; |
| } |
| |
| ["same-origin", "same-site"].forEach(site => { |
| const title = `Popup navigating to ${site} with ${variant.title}`; |
| const responseToken = token(); |
| const iframeToken = token(); |
| const navigateHost = site === "same-origin" ? SAME_ORIGIN : SAME_SITE; |
| const navigateURL = `${navigateHost.origin}/html/cross-origin-opener-policy/resources/coop-coep.py?coop=${variant.coop}&coep=${variant.coep}&responseToken=${responseToken}&iframeToken=${iframeToken}`; |
| const opener = site === "same-origin" ? variant.opener : false; |
| |
| promise_test(t => { |
| // For each test we open a COOP: same-origin/COEP: require-corp document in a popup and then |
| // navigate that to either a same-origin (site=="same-origin") or same-site (site=="same-site") |
| // document whose COOP and COEP are set as per the top-most array. We then verify that this |
| // document has the correct opener for its specific setup. |
| return dispatcher_url_test(t, `${SAME_ORIGIN.origin}/html/cross-origin-opener-policy/resources/coop-coep.py?coop=same-origin&coep=require-corp&navigate=${encodeURIComponent(navigateURL)}`, responseToken, iframeToken, opener, undefined, () => t.done()); |
| }, title); |
| }); |
| }); |
| </script> |