summaryrefslogtreecommitdiffstats
path: root/testing/web-platform/tests/html/anonymous-iframe/requestStorageAccessFor.tentative.https.window.js
blob: fa2fc6576f60fdb0bdfe4cebe832707ec4d64a5a (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
// META: script=/common/get-host-info.sub.js
// META: script=/common/utils.js
// META: script=/common/dispatcher/dispatcher.js
// META: script=/html/cross-origin-embedder-policy/credentialless/resources/common.js
// META: script=./resources/common.js

setup(() => {
  assert_implements(document.requestStorageAccessFor,
    "requestStorageAccessFor is not supported.");
})

const requestStorageAccessFor = (iframe, origin) => {
  const reply = token();
  send(iframe, `
    try {
      await document.requestStorageAccessFor("${origin}");
      send("${reply}", "success");
    } catch {
      send("${reply}", "failed");
    }
  `);
  return receive(reply);
}

promise_test(async test => {
  const same_origin = window.origin;
  const iframe = newIframeCredentialless(same_origin);
  assert_equals(await requestStorageAccessFor(iframe, same_origin), "failed");
}, "Same-origin credentialless iframe can't request storage access");

promise_test(async test => {
  const cross_origin = get_host_info().HTTPS_REMOTE_ORIGIN;
  const iframe = newIframeCredentialless(cross_origin);
  assert_equals(await requestStorageAccessFor(iframe, cross_origin), "failed");
}, "Cross-origin credentialless iframe can't request storage access");