| <html> |
| <body> |
| <script src="/resources/testharness.js"></script> |
| <script src="/resources/testharnessreport.js"></script> |
| <script src="/common/get-host-info.sub.js"></script> |
| <script src="resources/feature-policy-navigation.js"></script> |
| <script> |
| (async () => { |
| await test_frame( |
| "HTTPS_REMOTE_ORIGIN", |
| "device-memory=false&dpr=false&viewport-width=false&sec-ch-ua=true&sec-ch-ua-mobile=true", |
| "", |
| "Client hints not loaded on cross-origin iframe request with no feature policy."); |
| await test_frame( |
| "HTTPS_ORIGIN", |
| "device-memory=true&dpr=true&viewport-width=true&sec-ch-ua=true&sec-ch-ua-mobile=true", |
| "", |
| "Client hints loaded on same-origin iframe request with no feature policy."); |
| |
| let allow = "ch-device-memory *; ch-dpr 'src'; ch-viewport-width 'self'; ch-prefers-color-scheme 'none'"; |
| await test_frame( |
| "HTTPS_REMOTE_ORIGIN", |
| "device-memory=true&dpr=true&viewport-width=false&sec-ch-ua=true&sec-ch-ua-mobile=true", |
| allow, |
| "Client hints loaded on cross-origin iframe request with allow list."); |
| await test_frame( |
| "HTTPS_ORIGIN", |
| "device-memory=true&dpr=true&viewport-width=true&sec-ch-ua=true&sec-ch-ua-mobile=true", |
| allow, |
| "Client hints loaded on same-origin iframe request with allow list."); |
| })(); |
| |
| </script> |
| </body> |
| </html> |
| |
