// Copyright (c) 2012 The Chromium Authors. All rights reserved. // Use of this source code is governed by a BSD-style license that can be // found in the LICENSE file. #include "chrome/common/content_settings.h" #include "chrome/common/render_messages.h" #include "chrome/renderer/content_settings_observer.h" #include "chrome/test/base/chrome_render_view_test.h" #include "content/public/renderer/render_view.h" #include "ipc/ipc_message_macros.h" #include "testing/gmock/include/gmock/gmock.h" #include "testing/gtest/include/gtest/gtest.h" #include "third_party/WebKit/public/web/WebView.h" using testing::_; using testing::DeleteArg; namespace { class MockContentSettingsObserver : public ContentSettingsObserver { public: explicit MockContentSettingsObserver(content::RenderFrame* render_frame); virtual bool Send(IPC::Message* message); MOCK_METHOD1(OnContentBlocked, void(ContentSettingsType)); MOCK_METHOD5(OnAllowDOMStorage, void(int, const GURL&, const GURL&, bool, IPC::Message*)); GURL image_url_; std::string image_origin_; }; MockContentSettingsObserver::MockContentSettingsObserver( content::RenderFrame* render_frame) : ContentSettingsObserver(render_frame, NULL), image_url_("http://www.foo.com/image.jpg"), image_origin_("http://www.foo.com") { } bool MockContentSettingsObserver::Send(IPC::Message* message) { IPC_BEGIN_MESSAGE_MAP(MockContentSettingsObserver, *message) IPC_MESSAGE_HANDLER(ChromeViewHostMsg_ContentBlocked, OnContentBlocked) IPC_MESSAGE_HANDLER_DELAY_REPLY(ChromeViewHostMsg_AllowDOMStorage, OnAllowDOMStorage) IPC_MESSAGE_UNHANDLED(ADD_FAILURE()) IPC_END_MESSAGE_MAP() // Our super class deletes the message. return RenderFrameObserver::Send(message); } } // namespace TEST_F(ChromeRenderViewTest, DidBlockContentType) { MockContentSettingsObserver observer(view_->GetMainRenderFrame()); EXPECT_CALL(observer, OnContentBlocked(CONTENT_SETTINGS_TYPE_COOKIES)); observer.DidBlockContentType(CONTENT_SETTINGS_TYPE_COOKIES); // Blocking the same content type a second time shouldn't send a notification. observer.DidBlockContentType(CONTENT_SETTINGS_TYPE_COOKIES); ::testing::Mock::VerifyAndClearExpectations(&observer); } // Tests that multiple invokations of AllowDOMStorage result in a single IPC. // Fails due to http://crbug.com/104300 TEST_F(ChromeRenderViewTest, DISABLED_AllowDOMStorage) { // Load some HTML, so we have a valid security origin. LoadHTML(""); MockContentSettingsObserver observer(view_->GetMainRenderFrame()); ON_CALL(observer, OnAllowDOMStorage(_, _, _, _, _)).WillByDefault(DeleteArg<4>()); EXPECT_CALL(observer, OnAllowDOMStorage(_, _, _, _, _)); observer.allowStorage(true); // Accessing localStorage from the same origin again shouldn't result in a // new IPC. observer.allowStorage(true); ::testing::Mock::VerifyAndClearExpectations(&observer); } // Regression test for http://crbug.com/35011 TEST_F(ChromeRenderViewTest, JSBlockSentAfterPageLoad) { // 1. Load page with JS. std::string html = "" "" "" "" "" "" ""; render_thread_->sink().ClearMessages(); LoadHTML(html.c_str()); // 2. Block JavaScript. RendererContentSettingRules content_setting_rules; ContentSettingsForOneType& script_setting_rules = content_setting_rules.script_rules; script_setting_rules.push_back( ContentSettingPatternSource(ContentSettingsPattern::Wildcard(), ContentSettingsPattern::Wildcard(), CONTENT_SETTING_BLOCK, std::string(), false)); ContentSettingsObserver* observer = ContentSettingsObserver::Get( view_->GetMainRenderFrame()); observer->SetContentSettingRules(&content_setting_rules); // Make sure no pending messages are in the queue. ProcessPendingMessages(); render_thread_->sink().ClearMessages(); // 3. Reload page. std::string url_str = "data:text/html;charset=utf-8,"; url_str.append(html); GURL url(url_str); Reload(url); ProcessPendingMessages(); // 4. Verify that the notification that javascript was blocked is sent after // the navigation notification is sent. int navigation_index = -1; int block_index = -1; for (size_t i = 0; i < render_thread_->sink().message_count(); ++i) { const IPC::Message* msg = render_thread_->sink().GetMessageAt(i); if (msg->type() == GetNavigationIPCType()) navigation_index = i; if (msg->type() == ChromeViewHostMsg_ContentBlocked::ID) block_index = i; } EXPECT_NE(-1, navigation_index); EXPECT_NE(-1, block_index); EXPECT_LT(navigation_index, block_index); } TEST_F(ChromeRenderViewTest, PluginsTemporarilyAllowed) { // Load some HTML. LoadHTML("Foo"); std::string foo_plugin = "foo"; std::string bar_plugin = "bar"; ContentSettingsObserver* observer = ContentSettingsObserver::Get(view_->GetMainRenderFrame()); EXPECT_FALSE(observer->IsPluginTemporarilyAllowed(foo_plugin)); // Temporarily allow the "foo" plugin. observer->OnLoadBlockedPlugins(foo_plugin); EXPECT_TRUE(observer->IsPluginTemporarilyAllowed(foo_plugin)); EXPECT_FALSE(observer->IsPluginTemporarilyAllowed(bar_plugin)); // Simulate a navigation within the page. DidNavigateWithinPage(GetMainFrame(), true); EXPECT_TRUE(observer->IsPluginTemporarilyAllowed(foo_plugin)); EXPECT_FALSE(observer->IsPluginTemporarilyAllowed(bar_plugin)); // Navigate to a different page. LoadHTML("Bar"); EXPECT_FALSE(observer->IsPluginTemporarilyAllowed(foo_plugin)); EXPECT_FALSE(observer->IsPluginTemporarilyAllowed(bar_plugin)); // Temporarily allow all plugins. observer->OnLoadBlockedPlugins(std::string()); EXPECT_TRUE(observer->IsPluginTemporarilyAllowed(foo_plugin)); EXPECT_TRUE(observer->IsPluginTemporarilyAllowed(bar_plugin)); } TEST_F(ChromeRenderViewTest, ImagesBlockedByDefault) { MockContentSettingsObserver mock_observer(view_->GetMainRenderFrame()); // Load some HTML. LoadHTML("Foo"); // Set the default image blocking setting. RendererContentSettingRules content_setting_rules; ContentSettingsForOneType& image_setting_rules = content_setting_rules.image_rules; image_setting_rules.push_back( ContentSettingPatternSource(ContentSettingsPattern::Wildcard(), ContentSettingsPattern::Wildcard(), CONTENT_SETTING_BLOCK, std::string(), false)); ContentSettingsObserver* observer = ContentSettingsObserver::Get( view_->GetMainRenderFrame()); observer->SetContentSettingRules(&content_setting_rules); EXPECT_CALL(mock_observer, OnContentBlocked(CONTENT_SETTINGS_TYPE_IMAGES)); EXPECT_FALSE(observer->allowImage(true, mock_observer.image_url_)); ::testing::Mock::VerifyAndClearExpectations(&observer); // Create an exception which allows the image. image_setting_rules.insert( image_setting_rules.begin(), ContentSettingPatternSource( ContentSettingsPattern::Wildcard(), ContentSettingsPattern::FromString(mock_observer.image_origin_), CONTENT_SETTING_ALLOW, std::string(), false)); EXPECT_CALL( mock_observer, OnContentBlocked(CONTENT_SETTINGS_TYPE_IMAGES)).Times(0); EXPECT_TRUE(observer->allowImage(true, mock_observer.image_url_)); ::testing::Mock::VerifyAndClearExpectations(&observer); } TEST_F(ChromeRenderViewTest, ImagesAllowedByDefault) { MockContentSettingsObserver mock_observer(view_->GetMainRenderFrame()); // Load some HTML. LoadHTML("Foo"); // Set the default image blocking setting. RendererContentSettingRules content_setting_rules; ContentSettingsForOneType& image_setting_rules = content_setting_rules.image_rules; image_setting_rules.push_back( ContentSettingPatternSource(ContentSettingsPattern::Wildcard(), ContentSettingsPattern::Wildcard(), CONTENT_SETTING_ALLOW, std::string(), false)); ContentSettingsObserver* observer = ContentSettingsObserver::Get(view_->GetMainRenderFrame()); observer->SetContentSettingRules(&content_setting_rules); EXPECT_CALL( mock_observer, OnContentBlocked(CONTENT_SETTINGS_TYPE_IMAGES)).Times(0); EXPECT_TRUE(observer->allowImage(true, mock_observer.image_url_)); ::testing::Mock::VerifyAndClearExpectations(&observer); // Create an exception which blocks the image. image_setting_rules.insert( image_setting_rules.begin(), ContentSettingPatternSource( ContentSettingsPattern::Wildcard(), ContentSettingsPattern::FromString(mock_observer.image_origin_), CONTENT_SETTING_BLOCK, std::string(), false)); EXPECT_CALL(mock_observer, OnContentBlocked(CONTENT_SETTINGS_TYPE_IMAGES)); EXPECT_FALSE(observer->allowImage(true, mock_observer.image_url_)); ::testing::Mock::VerifyAndClearExpectations(&observer); } TEST_F(ChromeRenderViewTest, ContentSettingsBlockScripts) { // Set the content settings for scripts. RendererContentSettingRules content_setting_rules; ContentSettingsForOneType& script_setting_rules = content_setting_rules.script_rules; script_setting_rules.push_back( ContentSettingPatternSource(ContentSettingsPattern::Wildcard(), ContentSettingsPattern::Wildcard(), CONTENT_SETTING_BLOCK, std::string(), false)); ContentSettingsObserver* observer = ContentSettingsObserver::Get(view_->GetMainRenderFrame()); observer->SetContentSettingRules(&content_setting_rules); // Load a page which contains a script. std::string html = "" "" "" "" "" "" ""; LoadHTML(html.c_str()); // Verify that the script was blocked. bool was_blocked = false; for (size_t i = 0; i < render_thread_->sink().message_count(); ++i) { const IPC::Message* msg = render_thread_->sink().GetMessageAt(i); if (msg->type() == ChromeViewHostMsg_ContentBlocked::ID) was_blocked = true; } EXPECT_TRUE(was_blocked); } TEST_F(ChromeRenderViewTest, ContentSettingsAllowScripts) { // Set the content settings for scripts. RendererContentSettingRules content_setting_rules; ContentSettingsForOneType& script_setting_rules = content_setting_rules.script_rules; script_setting_rules.push_back( ContentSettingPatternSource(ContentSettingsPattern::Wildcard(), ContentSettingsPattern::Wildcard(), CONTENT_SETTING_ALLOW, std::string(), false)); ContentSettingsObserver* observer = ContentSettingsObserver::Get(view_->GetMainRenderFrame()); observer->SetContentSettingRules(&content_setting_rules); // Load a page which contains a script. std::string html = "" "" "" "" "" "" ""; LoadHTML(html.c_str()); // Verify that the script was not blocked. bool was_blocked = false; for (size_t i = 0; i < render_thread_->sink().message_count(); ++i) { const IPC::Message* msg = render_thread_->sink().GetMessageAt(i); if (msg->type() == ChromeViewHostMsg_ContentBlocked::ID) was_blocked = true; } EXPECT_FALSE(was_blocked); } TEST_F(ChromeRenderViewTest, ContentSettingsInterstitialPages) { MockContentSettingsObserver mock_observer(view_->GetMainRenderFrame()); // Block scripts. RendererContentSettingRules content_setting_rules; ContentSettingsForOneType& script_setting_rules = content_setting_rules.script_rules; script_setting_rules.push_back( ContentSettingPatternSource(ContentSettingsPattern::Wildcard(), ContentSettingsPattern::Wildcard(), CONTENT_SETTING_BLOCK, std::string(), false)); // Block images. ContentSettingsForOneType& image_setting_rules = content_setting_rules.image_rules; image_setting_rules.push_back( ContentSettingPatternSource(ContentSettingsPattern::Wildcard(), ContentSettingsPattern::Wildcard(), CONTENT_SETTING_BLOCK, std::string(), false)); ContentSettingsObserver* observer = ContentSettingsObserver::Get(view_->GetMainRenderFrame()); observer->SetContentSettingRules(&content_setting_rules); observer->OnSetAsInterstitial(); // Load a page which contains a script. std::string html = "" "" "" "" "" "" ""; LoadHTML(html.c_str()); // Verify that the script was allowed. bool was_blocked = false; for (size_t i = 0; i < render_thread_->sink().message_count(); ++i) { const IPC::Message* msg = render_thread_->sink().GetMessageAt(i); if (msg->type() == ChromeViewHostMsg_ContentBlocked::ID) was_blocked = true; } EXPECT_FALSE(was_blocked); // Verify that images are allowed. EXPECT_CALL( mock_observer, OnContentBlocked(CONTENT_SETTINGS_TYPE_IMAGES)).Times(0); EXPECT_TRUE(observer->allowImage(true, mock_observer.image_url_)); ::testing::Mock::VerifyAndClearExpectations(&observer); }