summaryrefslogtreecommitdiffstats
path: root/testing/web-platform/tests/mixed-content/csp.https.window.js
blob: 5428fb479110a5171174e0ffbebe95b890b4df32 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
// META: script=/common/dispatcher/dispatcher.js
// META: script=/common/get-host-info.sub.js
// META: script=/common/utils.js

promise_test((t) => {
  const url = `${get_host_info().HTTP_ORIGIN}/common/text-plain.txt`;
  const promise = fetch(url, { mode: "no-cors" });
  return promise_rejects_js(t, TypeError, promise, "mixed content fetch");
}, "Mixed content checks apply to fetches in sandboxed documents");

promise_test(async (t) => {
  const uuid = token();
  const context = new RemoteContext(uuid);

  const iframe = document.body.appendChild(document.createElement("iframe"));
  iframe.src = remoteExecutorUrl(uuid, { protocol: "http:" });

  const result = await Promise.race([
      context.execute_script(() => "loaded"),
      new Promise((resolve) => t.step_timeout(() => {
        resolve("timed out");
      }, 1000 /* ms */)),
  ]);
  assert_equals(result, "timed out");
}, "Mixed content checks apply to iframes in sandboxed documents");


promise_test(async (t) => {
  const uuid = token();

  const popup = window.open(remoteExecutorUrl(uuid, { protocol: "http:" }));

  const context = new RemoteContext(uuid);
  const result = await Promise.race([
      context.execute_script(() => "loaded"),
      new Promise((resolve) => t.step_timeout(() => {
        resolve("timed out");
      }, 1000 /* ms */)),
  ]);
  assert_equals(result, "timed out");
}, "Mixed content checks apply to popups in sandboxed documents");