3 files changed, 41 insertions, 0 deletions
diff --git a/testing/web-platform/tests/bluetooth/requestLEScan/reject_opaque_origin.https.html b/testing/web-platform/tests/bluetooth/requestLEScan/reject_opaque_origin.https.html
new file mode 100644
index 0000000000..272c5aa760
--- /dev/null
+++ b/testing/web-platform/tests/bluetooth/requestLEScan/reject_opaque_origin.https.html
@@ -0,0 +1,13 @@
+<!DOCTYPE html>
+
+<script src="/resources/testharness.js"></script>
+<script src="/resources/testharnessreport.js"></script>
+<script>
+  'use strict';
+
+  promise_test(async (t) => {
+    await promise_rejects_dom(
+        t, 'SecurityError', navigator.bluetooth.requestLEScan(),
+        'requestLEScan() should throw a SecurityError DOMException when called from a context where the top-level document has an opaque origin.');
+  }, 'Calls to Bluetooth APIs from an origin with opaque top origin get blocked.');
+</script>
+\ No newline at end of file
diff --git a/testing/web-platform/tests/bluetooth/requestLEScan/reject_opaque_origin.https.html.headers b/testing/web-platform/tests/bluetooth/requestLEScan/reject_opaque_origin.https.html.headers
new file mode 100644
index 0000000000..c7e4e7cc5b
--- /dev/null
+++ b/testing/web-platform/tests/bluetooth/requestLEScan/reject_opaque_origin.https.html.headers
@@ -0,0 +1 @@
+Content-Security-Policy: sandbox allow-scripts
+\ No newline at end of file
diff --git a/testing/web-platform/tests/bluetooth/requestLEScan/sandboxed_iframe.https.window.js b/testing/web-platform/tests/bluetooth/requestLEScan/sandboxed_iframe.https.window.js
new file mode 100644
index 0000000000..32d1e74b77
--- /dev/null
+++ b/testing/web-platform/tests/bluetooth/requestLEScan/sandboxed_iframe.https.window.js
@@ -0,0 +1,27 @@
+// META: script=/resources/testdriver.js
+// META: script=/resources/testdriver-vendor.js
+// META: script=/bluetooth/resources/bluetooth-test.js
+// META: script=/bluetooth/resources/bluetooth-fake-devices.js
+
+'use strict';
+
+let iframe = document.createElement('iframe');
+
+bluetooth_test(async () => {
+  await getConnectedHealthThermometerDevice();
+  await new Promise(resolve => {
+    iframe.src = '/bluetooth/resources/health-thermometer-iframe.html';
+    iframe.sandbox.add('allow-scripts');
+    iframe.allow = 'bluetooth';
+    document.body.appendChild(iframe);
+    iframe.addEventListener('load', resolve);
+  });
+  await new Promise(resolve => {
+    iframe.contentWindow.postMessage({type: 'RequestLEScan'}, '*');
+
+    window.addEventListener('message', (messageEvent) => {
+      assert_false(/^FAIL: .*/.test(messageEvent.data));
+      resolve();
+    });
+  });
+}, 'Calls to Bluetooth APIs from a sandboxed iframe are valid.');
+\ No newline at end of file