| <!DOCTYPE html> |
| <body> |
| <script> |
| 'use strict'; |
| var same_origin_src = '/feature-policy/resources/feature-policy-allowedfeatures.html'; |
| var cross_origin_src = 'https://{{domains[www1]}}:{{ports[https][0]}}' + same_origin_src; |
| var subframe_header_policy = '?pipe=header(Feature-Policy, fullscreen '; |
| var policy_all = '*'; |
| var policy_self = '\'self\''; |
| var policy_none = '\'none\''; |
| |
| let local_frame_all = document.createElement('iframe'); |
| let local_frame_self = document.createElement('iframe'); |
| let local_frame_none = document.createElement('iframe'); |
| local_frame_all.src = same_origin_src + subframe_header_policy + policy_all + ';)'; |
| local_frame_self.src = same_origin_src + subframe_header_policy + policy_self + ';)'; |
| local_frame_none.src = same_origin_src + subframe_header_policy + policy_none + ';)'; |
| |
| let remote_frame_all = document.createElement('iframe'); |
| let remote_frame_self = document.createElement('iframe'); |
| let remote_frame_none = document.createElement('iframe'); |
| remote_frame_all.src = cross_origin_src + subframe_header_policy + policy_all + ';)'; |
| remote_frame_self.src = cross_origin_src + subframe_header_policy + policy_self + ';)'; |
| remote_frame_none.src = cross_origin_src + subframe_header_policy + policy_none + ';)'; |
| |
| window.addEventListener('message', function(evt) { |
| if (evt.source === local_frame_all.contentWindow) { |
| parent.postMessage({frame: 'local', policy: policy_all, allowedfeatures: evt.data}, '*'); |
| } else if (evt.source === local_frame_self.contentWindow) { |
| parent.postMessage({frame: 'local', policy: policy_self, allowedfeatures: evt.data}, '*'); |
| } else if (evt.source === local_frame_none.contentWindow) { |
| parent.postMessage({frame: 'local', policy: policy_none, allowedfeatures: evt.data}, '*'); |
| } else if (evt.source === remote_frame_all.contentWindow) { |
| parent.postMessage({frame: 'remote', policy: policy_all, allowedfeatures: evt.data}, '*'); |
| } else if (evt.source === remote_frame_self.contentWindow) { |
| parent.postMessage({frame: 'remote', policy: policy_self, allowedfeatures: evt.data}, '*'); |
| } else if (evt.source === remote_frame_none.contentWindow) { |
| parent.postMessage({frame: 'remote', policy: policy_none, allowedfeatures: evt.data}, '*'); |
| } |
| }); |
| |
| document.body.appendChild(local_frame_all); |
| document.body.appendChild(local_frame_self); |
| document.body.appendChild(local_frame_none); |
| document.body.appendChild(remote_frame_all); |
| document.body.appendChild(remote_frame_self); |
| document.body.appendChild(remote_frame_none); |
| </script> |
| </body> |
| |
