diff --git a/testing/web-platform/tests/html/cross-origin-embedder-policy/anonymous-iframe/cookie-store.tentative.https.window.js b/testing/web-platform/tests/html/cross-origin-embedder-policy/anonymous-iframe/cookie-store.tentative.https.window.js new file mode 100644 index 000000000000..2332cb4950c3 --- /dev/null +++ b/testing/web-platform/tests/html/cross-origin-embedder-policy/anonymous-iframe/cookie-store.tentative.https.window.js @@ -0,0 +1,92 @@ +// META: timeout=long +// META: script=/common/get-host-info.sub.js +// META: script=/common/utils.js +// META: script=/common/dispatcher/dispatcher.js +// META: script=../credentialless/resources/common.js +// META: script=./resources/common.js + +// A set of tests, checking cookies defined from within an anonymous iframe +// continue to work. + +const same_origin = get_host_info().HTTPS_ORIGIN; +const cross_origin = get_host_info().HTTPS_REMOTE_ORIGIN; +const cookie_key = token() + +const anonymous_iframe = newAnonymousIframe(cross_origin); + +// Install some helper functions in the child to observe Cookies: +promise_setup(async () => { + await send(anonymous_iframe, ` + window.getMyCookie = () => { + const value = "; " + document.cookie; + const parts = value.split("; ${cookie_key}="); + if (parts.length !== 2) + return undefined + return parts.pop().split(';').shift(); + }; + + window.nextCookieValue = () => { + return new Promise(resolve => { + const old_cookie = getMyCookie(); + const interval = setInterval(() => { + const next_cookie_value = getMyCookie(); + if (old_cookie !== next_cookie_value) { + clearInterval(interval); + resolve(next_cookie_value) + } + }) + }); + }; + `); +}, "Setup"); + +promise_test(async test => { + const this_token = token(); + send(anonymous_iframe, ` + document.cookie = "${cookie_key}=cookie_value_1"; + send("${this_token}", getMyCookie()); + `); + + assert_equals(await receive(this_token), "cookie_value_1"); +}, "Set/Get cookie via JS API"); + +promise_test(async test => { + const resource_token = token(); + send(anonymous_iframe, ` + fetch("${showRequestHeaders(cross_origin, resource_token)}"); + `); + + const request_headers = JSON.parse(await receive(resource_token)); + const cookie_value = parseCookies(request_headers)[cookie_key]; + assert_equals(cookie_value, "cookie_value_1"); +}, "Get Cookie via subresource requests"); + +promise_test(async test => { + const resource_token = token(); + const resource_url = cross_origin + "/common/blank.html?pipe=" + + `|header(Set-Cookie,${cookie_key}=cookie_value_2;Path=/common/dispatcher)`; + const this_token = token(); + send(anonymous_iframe, ` + const next_cookie_value = nextCookieValue(); + fetch("${resource_url}"); + send("${this_token}", await next_cookie_value); + `); + + assert_equals(await receive(this_token), "cookie_value_2"); +}, "Set Cookie via subresource requests"); + +promise_test(async test => { + const resource_token = token(); + const resource_url = cross_origin + "/common/blank.html?pipe=" + + `|header(Set-Cookie,${cookie_key}=cookie_value_3;Path=/common/dispatcher)`; + const this_token = token(); + send(anonymous_iframe, ` + const next_cookie_value = nextCookieValue(); + const iframe = document.createElement("iframe"); + iframe.src = "${resource_url}"; + document.body.appendChild(iframe); + send("${this_token}", await next_cookie_value); + `); + + assert_equals(await receive(this_token), "cookie_value_3"); +}, "Set Cookie via navigation requests");