1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
|
// Copyright 2014 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "base/command_line.h"
#include "extensions/common/manifest_constants.h"
#include "extensions/common/manifest_handlers/content_capabilities_handler.h"
#include "extensions/common/manifest_test.h"
#include "extensions/common/permissions/api_permission.h"
#include "extensions/common/permissions/extensions_api_permissions.h"
#include "extensions/common/permissions/permissions_info.h"
#include "extensions/common/switches.h"
#include "testing/gtest/include/gtest/gtest.h"
#include "url/gurl.h"
namespace extensions {
using extensions::APIPermission;
class ContentCapabilitiesManifestTest : public ManifestTest {
std::string GetTestExtensionID() const override {
return std::string("apdfllckaahabafndbhieahigkjlhalf");
}
};
TEST_F(ContentCapabilitiesManifestTest, RejectDomainWildcards) {
scoped_refptr<Extension> extension(LoadAndExpectWarning(
"content_capabilities_domain_wildcard.json",
manifest_errors::kInvalidContentCapabilitiesMatchOrigin));
const ContentCapabilitiesInfo& info = ContentCapabilitiesInfo::Get(
extension.get());
// Make sure the wildcard is not included in the pattern set.
EXPECT_FALSE(info.url_patterns.MatchesURL(GURL("https://bar.example.com/")));
EXPECT_TRUE(info.url_patterns.MatchesURL(GURL("https://foo.example.com/")));
}
TEST_F(ContentCapabilitiesManifestTest, RejectedAllHosts) {
scoped_refptr<Extension> extension(LoadAndExpectWarning(
"content_capabilities_all_hosts.json",
manifest_errors::kInvalidContentCapabilitiesMatchOrigin));
const ContentCapabilitiesInfo& info = ContentCapabilitiesInfo::Get(
extension.get());
// Make sure the wildcard is not included in the pattern set.
EXPECT_FALSE(info.url_patterns.MatchesURL(GURL("https://nonspecific.com/")));
EXPECT_TRUE(info.url_patterns.MatchesURL(GURL("https://example.com/")));
}
TEST_F(ContentCapabilitiesManifestTest, InvalidPermission) {
scoped_refptr<Extension> extension(LoadAndExpectWarning(
"content_capabilities_invalid_permission.json",
manifest_errors::kInvalidContentCapabilitiesPermission));
const ContentCapabilitiesInfo& info = ContentCapabilitiesInfo::Get(
extension.get());
// Make sure the invalid permission is not included in the permission set.
EXPECT_EQ(3u, info.permissions.size());
EXPECT_EQ(1u, info.permissions.count(APIPermission::kClipboardRead));
EXPECT_EQ(1u, info.permissions.count(APIPermission::kClipboardWrite));
EXPECT_EQ(1u, info.permissions.count(APIPermission::kUnlimitedStorage));
EXPECT_EQ(0u, info.permissions.count(APIPermission::kUsb));
}
TEST_F(ContentCapabilitiesManifestTest, InvalidValue) {
LoadAndExpectError("content_capabilities_invalid_value.json",
"expected dictionary, got list");
}
TEST_F(ContentCapabilitiesManifestTest, RejectNonHttpsUrlPatterns) {
LoadAndExpectError("content_capabilities_non_https_matches.json",
manifest_errors::kInvalidContentCapabilitiesMatch);
}
TEST_F(ContentCapabilitiesManifestTest, Valid) {
scoped_refptr<Extension> extension(
LoadAndExpectSuccess("content_capabilities_valid.json"));
const ContentCapabilitiesInfo& info = ContentCapabilitiesInfo::Get(
extension.get());
EXPECT_EQ(1u, info.url_patterns.size());
EXPECT_FALSE(info.url_patterns.MatchesURL(GURL("http://valid.example.com/")));
EXPECT_FALSE(info.url_patterns.MatchesURL(GURL("https://foo.example.com/")));
EXPECT_FALSE(info.url_patterns.MatchesURL(GURL("https://example.com/")));
EXPECT_TRUE(info.url_patterns.MatchesURL(GURL("https://valid.example.com/")));
EXPECT_EQ(3u, info.permissions.size());
EXPECT_EQ(1u, info.permissions.count(APIPermission::kClipboardRead));
EXPECT_EQ(1u, info.permissions.count(APIPermission::kClipboardWrite));
EXPECT_EQ(1u, info.permissions.count(APIPermission::kUnlimitedStorage));
EXPECT_EQ(0u, info.permissions.count(APIPermission::kUsb));
}
} // namespace extensions
|
