summaryrefslogtreecommitdiffstats
path: root/testing/web-platform/tests/storage-access-api/storageAccess.testdriver.sub.html
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-07 19:33:14 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-07 19:33:14 +0000
commit36d22d82aa202bb199967e9512281e9a53db42c9 (patch)
tree105e8c98ddea1c1e4784a60a5a6410fa416be2de /testing/web-platform/tests/storage-access-api/storageAccess.testdriver.sub.html
parentInitial commit. (diff)
downloadfirefox-esr-36d22d82aa202bb199967e9512281e9a53db42c9.tar.xz
firefox-esr-36d22d82aa202bb199967e9512281e9a53db42c9.zip
Adding upstream version 115.7.0esr.upstream/115.7.0esr
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'testing/web-platform/tests/storage-access-api/storageAccess.testdriver.sub.html')
-rw-r--r--testing/web-platform/tests/storage-access-api/storageAccess.testdriver.sub.html31
1 files changed, 31 insertions, 0 deletions
diff --git a/testing/web-platform/tests/storage-access-api/storageAccess.testdriver.sub.html b/testing/web-platform/tests/storage-access-api/storageAccess.testdriver.sub.html
new file mode 100644
index 0000000000..cc945dd182
--- /dev/null
+++ b/testing/web-platform/tests/storage-access-api/storageAccess.testdriver.sub.html
@@ -0,0 +1,31 @@
+<!DOCTYPE html>
+<head>
+ <title>TestDriver - Set Storage Access Command Tests</title>
+ <script src="/cookies/resources/cookie-helper.sub.js"></script>
+ <script src="/resources/testharness.js"></script>
+ <script src="/resources/testharnessreport.js"></script>
+ <script src="/resources/testdriver.js"></script>
+ <script src="/resources/testdriver-vendor.js"></script>
+ <script src="helpers.js"></script>
+</head>
+<body>
+ <script>
+ "use strict";
+
+ // Use a different domain so that the cookie is cross-site.
+ const wwwAlt = "https://{{hosts[alt][www]}}:{{ports[https][0]}}";
+
+ promise_test(async t => {
+ await MaybeSetStorageAccess("*", "*", "blocked");
+ t.add_cleanup(async () => {
+ await test_driver.delete_all_cookies();
+ await MaybeSetStorageAccess("*", "*", "allowed");
+ });
+
+ const responder_html = `${wwwAlt}/storage-access-api/resources/script-with-cookie-header.py?script=embedded_responder.js`;
+ const frame = await CreateFrame(responder_html);
+
+ assert_false(await CanFrameWriteCookies(frame), "Cross-site iframe should not be allowed to write cookies via document.cookie.");
+ });
+ </script>
+</body>