summaryrefslogtreecommitdiffstats
path: root/testing/web-platform/tests/fenced-frame/default-enabled-features-attribute-allow.https.html
blob: 3c3831f0157de1235bead0c2c6f69170b1dc26da (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
<!DOCTYPE html>
<title>Test default permission policy features with allow="" attribute</title>
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
<script src="/common/utils.js"></script>
<script src="/common/dispatcher/dispatcher.js"></script>
<script src="resources/utils.js"></script>
<script src="/common/get-host-info.sub.js"></script>
<script src="resources/default-enabled-features-helper.js"></script>

<body>
<script>
promise_test(async(t) => {
  await runDefaultEnabledFeaturesTest(t, /*should_load=*/true,
      get_host_info().ORIGIN,
      generator_api="fledge",
      allow="shared-storage *; attribution-reporting *");
  await runDefaultEnabledFeaturesTest(t, /*should_load=*/true,
      get_host_info().ORIGIN,
      generator_api="sharedstorage",
      allow="shared-storage *; attribution-reporting *");
}, 'Same-origin fenced frame with allow attribute enabling required features');

promise_test(async(t) => {
  await runDefaultEnabledFeaturesTest(t, /*should_load=*/true,
      get_host_info().REMOTE_ORIGIN,
      generator_api="fledge",
      allow="shared-storage *; attribution-reporting *");
  await runDefaultEnabledFeaturesTest(t, /*should_load=*/true,
      get_host_info().REMOTE_ORIGIN,
      generator_api="sharedstorage",
      allow="shared-storage *; attribution-reporting *");
}, 'Cross-origin fenced frame with allow attribute enabling required features');

promise_test(async(t) => {
  const fencedframe = await attachFencedFrameContext({
        generator_api: "fledge",
        headers: [["Permissions-Policy", "attribution-reporting=()"]],
        origin: get_host_info().ORIGIN});

  await fencedframe.execute(async () => {
    assert_false(document.featurePolicy.allowsFeature('attribution-reporting'),
        "Attribution reporting should NOT be allowed in the fenced frame.");
  }, []);
}, 'Delivered policies can further restrict permissions of a fenced frame');

</script>
</body>
</html>