1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
|
<meta name=timeout content=long>
<title>reporting same origin with report-to</title>
<script src=/resources/testharness.js></script>
<script src=/resources/testharnessreport.js></script>
<script src="/common/get-host-info.sub.js"></script>
<script src="/common/utils.js"></script>
<script src="/common/dispatcher/dispatcher.js"></script>
<script src="/html/cross-origin-opener-policy/resources/common.js"></script>
<script
src="/html/cross-origin-opener-policy/reporting/resources/reporting-common.js?pipe=sub&report_id=380ca360-d1ae-4329-b1dd-69cea49cd705&report_only_id=cf9ac91d-6c5d-4489-a420-10be9402ef84"></script>
<script>
let tests = [
// popup origin, popup COOP, popup COEP, popup COOP report-only, popup COEP report-only, expected reports
// Open a cross-origin popup without any COOP setup, the current document
// (opener) report-only would cause a browsing context group swap, hence a
// report is sent to the corresponding endpoint.
[
CROSS_ORIGIN,
"",
"",
"",
"",
[
{
"endpoint": reportOnlyEndpoint,
"report": {
"body": {
"disposition": "reporting",
"effectivePolicy": "same-origin",
"nextResponseURL": /uuid=EXECUTOR_UUID$/, // next document URL
"type": "navigation-from-response"
},
"url": `${location.href}`,
"type": "coop"
}
},
]
],
// Open a cross-origin popup with a same-origin COOP report-only value, which
// would cause a browsing context group swap, hence a report is sent to both
// endpoints.
[
CROSS_ORIGIN,
"",
"",
`same-origin; report-to="${popupReportOnlyEndpoint.name}"`,
"",
[
{
"endpoint": reportOnlyEndpoint,
"report": {
"body": {
"disposition": "reporting",
"effectivePolicy": "same-origin",
"nextResponseURL": /uuid=EXECUTOR_UUID$/, // next document URL
"type": "navigation-from-response"
},
"url": `${location.href}`,
"type": "coop"
}
},
{
"endpoint": popupReportOnlyEndpoint,
"report": {
"body": {
"disposition": "reporting",
"effectivePolicy": "same-origin",
"previousResponseURL": "",
"referrer": `${location.origin}/`, // referrer
"type": "navigation-to-response"
},
"url": /uuid=EXECUTOR_UUID$/,
"type": "coop"
}
}
]
],
// Open a same-origin popup with a same-origin COOP report-only value, the two
// COOP-report-only values match, hence no virtual browsing context group swap
// happens and no report is sent.
[
SAME_ORIGIN,
"",
"",
`same-origin; report-to="${popupReportOnlyEndpoint.name}"`,
"",
[]
],
];
runNavigationReportingTests(document.title, tests);
</script>
|
