// Copyright 2012 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#include "components/content_settings/core/browser/host_content_settings_map.h"

#include <array>
#include <memory>
#include <optional>
#include <string>
#include <utility>

#include "base/auto_reset.h"
#include "base/command_line.h"
#include "base/functional/bind.h"
#include "base/json/json_reader.h"
#include "base/json/json_writer.h"
#include "base/memory/ptr_util.h"
#include "base/memory/raw_ptr.h"
#include "base/memory/scoped_refptr.h"
#include "base/test/metrics/histogram_tester.h"
#include "base/test/scoped_feature_list.h"
#include "base/test/simple_test_clock.h"
#include "base/time/time.h"
#include "build/build_config.h"
#include "chrome/browser/content_settings/cookie_settings_factory.h"
#include "chrome/browser/content_settings/host_content_settings_map_factory.h"
#include "chrome/browser/content_settings/mock_settings_observer.h"
#include "chrome/browser/content_settings/one_time_permission_provider.h"
#include "chrome/common/url_constants.h"
#include "chrome/test/base/testing_profile.h"
#include "components/client_hints/common/client_hints.h"
#include "components/content_settings/core/browser/content_settings_info.h"
#include "components/content_settings/core/browser/content_settings_mock_observer.h"
#include "components/content_settings/core/browser/content_settings_pref_provider.h"
#include "components/content_settings/core/browser/content_settings_registry.h"
#include "components/content_settings/core/browser/content_settings_rule.h"
#include "components/content_settings/core/browser/content_settings_uma_util.h"
#include "components/content_settings/core/browser/content_settings_utils.h"
#include "components/content_settings/core/browser/cookie_settings.h"
#include "components/content_settings/core/browser/permission_settings_registry.h"
#include "components/content_settings/core/browser/user_modifiable_provider.h"
#include "components/content_settings/core/browser/website_settings_info.h"
#include "components/content_settings/core/browser/website_settings_registry.h"
#include "components/content_settings/core/common/content_settings.h"
#include "components/content_settings/core/common/content_settings_constraints.h"
#include "components/content_settings/core/common/content_settings_pattern.h"
#include "components/content_settings/core/common/content_settings_types.h"
#include "components/content_settings/core/common/content_settings_types.mojom-shared.h"
#include "components/content_settings/core/common/content_settings_utils.h"
#include "components/content_settings/core/common/features.h"
#include "components/content_settings/core/common/host_indexed_content_settings.h"
#include "components/content_settings/core/common/pref_names.h"
#include "components/content_settings/core/test/content_settings_mock_provider.h"
#include "components/content_settings/core/test/content_settings_test_utils.h"
#include "components/keyed_service/core/refcounted_keyed_service.h"
#include "components/permissions/features.h"
#include "components/prefs/pref_service.h"
#include "components/prefs/scoped_user_pref_update.h"
#include "components/safe_browsing/core/common/features.h"
#include "components/sync_preferences/testing_pref_service_syncable.h"
#include "content/public/test/browser_task_environment.h"
#include "net/base/schemeful_site.h"
#include "net/cookies/site_for_cookies.h"
#include "net/cookies/static_cookie_policy.h"
#include "services/device/public/cpp/device_features.h"
#include "testing/gmock/include/gmock/gmock.h"
#include "testing/gtest/include/gtest/gtest.h"
#include "third_party/blink/public/common/permissions/permission_utils.h"
#include "url/gurl.h"

#if BUILDFLAG(ENABLE_EXTENSIONS_CORE)
#include "extensions/browser/extension_registry.h"
#include "extensions/common/extension.h"
#include "extensions/common/extension_builder.h"
#include "extensions/common/mojom/api_permission_id.mojom.h"
#include "extensions/common/permissions/api_permission_set.h"
#include "extensions/common/permissions/manifest_permission.h"
#include "extensions/common/permissions/permissions_data.h"
#include "extensions/common/url_pattern_set.h"
#endif

using content_settings::SettingSource;
using content_settings::mojom::SessionModel;
using ::testing::_;
using ::testing::AllOf;
using ::testing::Field;
using ::testing::MockFunction;
using ::testing::Property;
using ::testing::ResultOf;
using ::testing::Return;
using ::testing::SizeIs;
using ::testing::UnorderedElementsAre;

namespace {

base::Time GetSettingLastModifiedDate(HostContentSettingsMap* map,
                                      GURL primary_url,
                                      GURL secondary_url,
                                      ContentSettingsType type) {
  content_settings::SettingInfo info;
  map->GetWebsiteSetting(primary_url, secondary_url, type, &info);
  return info.metadata.last_modified();
}
}  // namespace

class MockUserModifiableProvider
    : public content_settings::UserModifiableProvider {
 public:
  ~MockUserModifiableProvider() override = default;
  MOCK_CONST_METHOD2(
      GetRuleIterator,
      std::unique_ptr<content_settings::RuleIterator>(ContentSettingsType,
                                                      bool));

  MOCK_METHOD5(SetWebsiteSetting,
               bool(const ContentSettingsPattern&,
                    const ContentSettingsPattern&,
                    ContentSettingsType,
                    const base::Value&,
                    const content_settings::ContentSettingConstraints&));

  MOCK_METHOD1(ClearAllContentSettingsRules, void(ContentSettingsType));

  MOCK_METHOD0(ShutdownOnUIThread, void());

  MOCK_METHOD4(UpdateLastUsedTime,
               bool(const GURL& primary_url,
                    const GURL& secondary_url,
                    ContentSettingsType content_type,
                    const base::Time time));
  MOCK_METHOD3(UpdateLastVisitTime,
               bool(const ContentSettingsPattern& primary_pattern,
                    const ContentSettingsPattern& secondary_pattern,
                    ContentSettingsType content_type));
  MOCK_METHOD3(SetAutorevocationBypassedByUser,
               bool(const ContentSettingsPattern& primary_pattern,
                    const ContentSettingsPattern& secondary_pattern,
                    ContentSettingsType content_type));
  MOCK_METHOD4(RenewContentSetting,
               std::optional<base::TimeDelta>(
                   const GURL& primary_url,
                   const GURL& secondary_url,
                   ContentSettingsType content_type,
                   std::optional<ContentSetting> setting_to_match));

  MOCK_METHOD1(SetClockForTesting, void(const base::Clock*));
};

class HostContentSettingsMapTest : public testing::Test {
 public:
  HostContentSettingsMapTest()
      : task_environment_(base::test::TaskEnvironment::TimeSource::MOCK_TIME) {
    feature_list_.InitAndEnableFeature(
        ::features::kSensorsAllowAskBlockPermissionModel);
  }

  void FastForwardTime(base::TimeDelta delta) {
    task_environment_.FastForwardBy(delta);
  }

 protected:
  const std::string& GetPrefName(ContentSettingsType type) {
    return content_settings::WebsiteSettingsRegistry::GetInstance()
        ->Get(type)
        ->pref_name();
  }

  content::BrowserTaskEnvironment task_environment_;
  base::test::ScopedFeatureList feature_list_;
};

// Wrapper to TestingProfile to reduce test boilerplates, by keeping a fixed
// |content_type| so caller only need to specify it once.
class TesterForType {
 public:
  TesterForType(TestingProfile* profile, ContentSettingsType content_type)
      : prefs_(profile->GetTestingPrefService()),
        host_content_settings_map_(
            HostContentSettingsMapFactory::GetForProfile(profile)),
        content_type_(content_type) {
    switch (content_type_) {
      case ContentSettingsType::COOKIES:
        policy_default_setting_ = prefs::kManagedDefaultCookiesSetting;
        break;
      case ContentSettingsType::POPUPS:
        policy_default_setting_ = prefs::kManagedDefaultPopupsSetting;
        break;
      case ContentSettingsType::ADS:
        policy_default_setting_ = prefs::kManagedDefaultAdsSetting;
        break;
      default:
        // Add support as needed.
        NOTREACHED();
    }
  }

  TesterForType(const TesterForType&) = delete;
  TesterForType& operator=(const TesterForType&) = delete;

  void ClearPolicyDefault() {
    prefs_->RemoveManagedPref(policy_default_setting_);
  }

  void SetPolicyDefault(ContentSetting setting) {
    prefs_->SetManagedPref(policy_default_setting_,
                           std::make_unique<base::Value>(setting));
  }

  void AddUserException(std::string exception,
                        ContentSetting content_settings) {
    ContentSettingsPattern pattern =
        ContentSettingsPattern::FromString(exception);
    host_content_settings_map_->SetContentSettingCustomScope(
        pattern, ContentSettingsPattern::Wildcard(), content_type_,
        content_settings);
  }

  // Wrapper to query GetWebsiteSetting(), and only return the source.
  SettingSource GetSettingSourceForURL(const std::string& url_str) {
    GURL url(url_str);
    content_settings::SettingInfo setting_info;
    base::Value result = host_content_settings_map_->GetWebsiteSetting(
        url, url, content_type_, &setting_info);
    return setting_info.source;
  }

 private:
  raw_ptr<sync_preferences::TestingPrefServiceSyncable> prefs_;
  raw_ptr<HostContentSettingsMap> host_content_settings_map_;
  ContentSettingsType content_type_;
  const char* policy_default_setting_;
};

// For building HostContentSettingsMap without HostContentSettingsMapFactory.
// Shuts down HostContentSettingsMap properly on destruction.
class ScopedMapNoFactoryTester {
 public:
  scoped_refptr<HostContentSettingsMap> map;

  explicit ScopedMapNoFactoryTester(TestingProfile& profile) {
    map = base::MakeRefCounted<HostContentSettingsMap>(
        profile.GetPrefs(),
        /*is_off_the_record=*/false,
        /*store_last_modified=*/false,
        /*restore_session=*/false,
        /*should_record_metrics=*/false);
  }

  ~ScopedMapNoFactoryTester() { map->ShutdownOnUIThread(); }
};

TEST_F(HostContentSettingsMapTest, DefaultValues) {
  TestingProfile profile;
  HostContentSettingsMap* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(&profile);

  // Check setting defaults.
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetDefaultContentSetting(
                ContentSettingsType::JAVASCRIPT));
  host_content_settings_map->SetDefaultContentSetting(
      ContentSettingsType::JAVASCRIPT, CONTENT_SETTING_BLOCK);
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetDefaultContentSetting(
                ContentSettingsType::JAVASCRIPT));
  EXPECT_EQ(CONTENT_SETTING_ALLOW, host_content_settings_map->GetContentSetting(
                                       chrome::ChromeUINewTabURLAsGURL(),
                                       chrome::ChromeUINewTabURLAsGURL(),
                                       ContentSettingsType::JAVASCRIPT));

  host_content_settings_map->SetDefaultContentSetting(
      ContentSettingsType::POPUPS, CONTENT_SETTING_ALLOW);
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetDefaultContentSetting(
                ContentSettingsType::POPUPS));
}

TEST_F(HostContentSettingsMapTest, IndividualSettings) {
  TestingProfile profile;
  HostContentSettingsMap* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(&profile);

  // Check returning individual settings.
  GURL host("http://example.com/");
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::COOKIES));
  host_content_settings_map->SetContentSettingDefaultScope(
      host, GURL(), ContentSettingsType::COOKIES, CONTENT_SETTING_DEFAULT);
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::COOKIES));
  host_content_settings_map->SetContentSettingDefaultScope(
      host, GURL(), ContentSettingsType::COOKIES, CONTENT_SETTING_BLOCK);
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::COOKIES));

  // Check returning all settings for a host.
  host_content_settings_map->SetContentSettingDefaultScope(
      host, GURL(), ContentSettingsType::JAVASCRIPT, CONTENT_SETTING_BLOCK);
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::JAVASCRIPT));
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::POPUPS));
  EXPECT_EQ(CONTENT_SETTING_ASK,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::GEOLOCATION));
  EXPECT_EQ(CONTENT_SETTING_ASK,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::NOTIFICATIONS));

  host_content_settings_map->SetContentSettingDefaultScope(
      host, GURL(), ContentSettingsType::AUTOPLAY, CONTENT_SETTING_BLOCK);
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::AUTOPLAY));

  // Check returning all hosts for a setting.
  GURL host2("http://example.org/");
  host_content_settings_map->SetContentSettingDefaultScope(
      host2, GURL(), ContentSettingsType::JAVASCRIPT, CONTENT_SETTING_BLOCK);
  ContentSettingsForOneType host_settings =
      host_content_settings_map->GetSettingsForOneType(
          ContentSettingsType::JAVASCRIPT);
  // |host_settings| contains the default setting and 2 exception.
  EXPECT_EQ(3U, host_settings.size());
  host_settings = host_content_settings_map->GetSettingsForOneType(
      ContentSettingsType::POPUPS);
  // |host_settings| contains only the default setting.
  EXPECT_EQ(1U, host_settings.size());
}

TEST_F(HostContentSettingsMapTest, GetWebsiteSettingsForOneType) {
  TestingProfile profile;
  auto hosts = std::to_array<GURL>(
      {GURL("https://example1.com/"), GURL("https://example2.com/")});
  HostContentSettingsMap* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(&profile);

  ContentSettingsForOneType client_hints_settings =
      host_content_settings_map->GetSettingsForOneType(
          ContentSettingsType::CLIENT_HINTS);
  EXPECT_EQ(0U, client_hints_settings.size());

  // Add setting for hosts[0].
  base::Value client_hint_value(42);

  base::DictValue client_hints_dictionary;
  client_hints_dictionary.Set(client_hints::kClientHintsSettingKey,
                              {std::move(client_hint_value)});
  host_content_settings_map->SetWebsiteSettingDefaultScope(
      hosts[0], GURL(), ContentSettingsType::CLIENT_HINTS,
      base::Value(client_hints_dictionary.Clone()));

  // Reading the settings should now return one setting.
  client_hints_settings = host_content_settings_map->GetSettingsForOneType(
      ContentSettingsType::CLIENT_HINTS);
  EXPECT_EQ(1U, client_hints_settings.size());
  for (size_t i = 0; i < client_hints_settings.size(); ++i) {
    EXPECT_EQ(ContentSettingsPattern::FromURLNoWildcard(hosts[i]),
              client_hints_settings.at(i).primary_pattern);
    EXPECT_EQ(ContentSettingsPattern::Wildcard(),
              client_hints_settings.at(i).secondary_pattern);
    EXPECT_EQ(client_hints_dictionary,
              client_hints_settings.at(i).setting_value);
  }

  // Add setting for hosts[1].
  host_content_settings_map->SetWebsiteSettingDefaultScope(
      hosts[1], GURL(), ContentSettingsType::CLIENT_HINTS,
      base::Value(client_hints_dictionary.Clone()));

  // Reading the settings should now return two settings.
  client_hints_settings = host_content_settings_map->GetSettingsForOneType(
      ContentSettingsType::CLIENT_HINTS);
  EXPECT_EQ(2U, client_hints_settings.size());
  for (size_t i = 0; i < client_hints_settings.size(); ++i) {
    EXPECT_EQ(ContentSettingsPattern::FromURLNoWildcard(hosts[i]),
              client_hints_settings.at(i).primary_pattern);
    EXPECT_EQ(ContentSettingsPattern::Wildcard(),
              client_hints_settings.at(i).secondary_pattern);
    EXPECT_EQ(client_hints_dictionary,
              client_hints_settings.at(i).setting_value);
  }

  // Add settings again for hosts[0].
  host_content_settings_map->SetWebsiteSettingDefaultScope(
      hosts[0], GURL(), ContentSettingsType::CLIENT_HINTS,
      base::Value(client_hints_dictionary.Clone()));

  // Reading the settings should still return two settings.
  client_hints_settings = host_content_settings_map->GetSettingsForOneType(
      ContentSettingsType::CLIENT_HINTS);
  EXPECT_EQ(2U, client_hints_settings.size());
  for (size_t i = 0; i < client_hints_settings.size(); ++i) {
    EXPECT_EQ(ContentSettingsPattern::FromURLNoWildcard(hosts[i]),
              client_hints_settings.at(i).primary_pattern);
    EXPECT_EQ(ContentSettingsPattern::Wildcard(),
              client_hints_settings.at(i).secondary_pattern);
    EXPECT_EQ(client_hints_dictionary,
              client_hints_settings.at(i).setting_value);
  }
}

TEST_F(HostContentSettingsMapTest, Clear) {
  TestingProfile profile;
  HostContentSettingsMap* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(&profile);

  // Check clearing one type.
  GURL host("http://example.org/");
  GURL host2("http://example.net/");
  host_content_settings_map->SetContentSettingDefaultScope(
      host2, GURL(), ContentSettingsType::COOKIES, CONTENT_SETTING_BLOCK);
  host_content_settings_map->SetContentSettingDefaultScope(
      host, GURL(), ContentSettingsType::COOKIES, CONTENT_SETTING_BLOCK);
  host_content_settings_map->SetContentSettingDefaultScope(
      host2, GURL(), ContentSettingsType::COOKIES, CONTENT_SETTING_BLOCK);
  host_content_settings_map->ClearSettingsForOneType(
      ContentSettingsType::COOKIES);
  ContentSettingsForOneType host_settings =
      host_content_settings_map->GetSettingsForOneType(
          ContentSettingsType::COOKIES);
  // |host_settings| contains only the default setting.
  EXPECT_EQ(1U, host_settings.size());
}

TEST_F(HostContentSettingsMapTest, Patterns) {
  TestingProfile profile;
  HostContentSettingsMap* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(&profile);

  GURL host1("http://example.com/");
  GURL host2("http://www.example.com/");
  GURL host3("http://example.org/");
  ContentSettingsPattern pattern1 =
      ContentSettingsPattern::FromString("[*.]example.com");
  ContentSettingsPattern pattern2 =
      ContentSettingsPattern::FromString("example.org");
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                host1, host1, ContentSettingsType::COOKIES));
  host_content_settings_map->SetContentSettingCustomScope(
      pattern1, ContentSettingsPattern::Wildcard(),
      ContentSettingsType::COOKIES, CONTENT_SETTING_BLOCK);
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                host1, host1, ContentSettingsType::COOKIES));
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                host2, host2, ContentSettingsType::COOKIES));
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                host3, host3, ContentSettingsType::COOKIES));
  host_content_settings_map->SetContentSettingCustomScope(
      pattern2, ContentSettingsPattern::Wildcard(),
      ContentSettingsType::COOKIES, CONTENT_SETTING_BLOCK);
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                host3, host3, ContentSettingsType::COOKIES));
}

// Changing a setting for one origin doesn't affect subdomains.
TEST_F(HostContentSettingsMapTest, Origins) {
  TestingProfile profile;
  HostContentSettingsMap* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(&profile);

  GURL host1("http://example.com/");
  GURL host2("http://www.example.com/");
  GURL host3("http://example.org/");
  GURL host4("http://example.com:8080");
  ContentSettingsPattern pattern =
      ContentSettingsPattern::FromURLNoWildcard(host1);
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                host1, host1, ContentSettingsType::COOKIES));
  host_content_settings_map->SetContentSettingCustomScope(
      pattern, ContentSettingsPattern::Wildcard(), ContentSettingsType::COOKIES,
      CONTENT_SETTING_BLOCK);
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                host1, host1, ContentSettingsType::COOKIES));
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                host2, host2, ContentSettingsType::COOKIES));
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                host3, host3, ContentSettingsType::COOKIES));
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                host4, host4, ContentSettingsType::COOKIES));
}

TEST_F(HostContentSettingsMapTest, Observer) {
  TestingProfile profile;
  // Use ScopedMapNoFactoryTester in order to enable the test to ignore
  // RevokedPermissionsService and
  // ContentSettingsType::REVOKED_UNUSED_SITE_PERMISSIONS.
  ScopedMapNoFactoryTester map_tester(profile);
  HostContentSettingsMap* host_content_settings_map = map_tester.map.get();
  MockSettingsObserver observer(host_content_settings_map);

  GURL host("http://example.com/");
  ContentSettingsPattern primary_pattern =
      ContentSettingsPattern::FromString("[*.]example.com");
  ContentSettingsPattern secondary_pattern = ContentSettingsPattern::Wildcard();
  EXPECT_CALL(observer, OnContentSettingsChanged(host_content_settings_map,
                                                 ContentSettingsType::COOKIES,
                                                 false, primary_pattern,
                                                 secondary_pattern, false));
  host_content_settings_map->SetContentSettingDefaultScope(
      host, GURL(), ContentSettingsType::COOKIES, CONTENT_SETTING_ALLOW);
  ::testing::Mock::VerifyAndClearExpectations(&observer);

  EXPECT_CALL(observer, OnContentSettingsChanged(host_content_settings_map,
                                                 ContentSettingsType::COOKIES,
                                                 false, _, _, true));
  host_content_settings_map->ClearSettingsForOneType(
      ContentSettingsType::COOKIES);
  ::testing::Mock::VerifyAndClearExpectations(&observer);

  EXPECT_CALL(observer, OnContentSettingsChanged(host_content_settings_map,
                                                 ContentSettingsType::COOKIES,
                                                 false, _, _, true));
  host_content_settings_map->SetDefaultContentSetting(
      ContentSettingsType::COOKIES, CONTENT_SETTING_BLOCK);
}

TEST_F(HostContentSettingsMapTest, ObserveDefaultPref) {
  TestingProfile profile;
  HostContentSettingsMap* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(&profile);

  PrefService* prefs = profile.GetPrefs();
  GURL host("http://example.com");

  host_content_settings_map->SetDefaultContentSetting(
      ContentSettingsType::COOKIES, CONTENT_SETTING_BLOCK);
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::COOKIES));

  const content_settings::WebsiteSettingsInfo* info =
      content_settings::WebsiteSettingsRegistry::GetInstance()->Get(
          ContentSettingsType::COOKIES);
  // Clearing the backing pref should also clear the internal cache.
  prefs->ClearPref(info->default_value_pref_name());
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::COOKIES));

  // Resetting the pref to its previous value should update the cache.
  prefs->SetInteger(info->default_value_pref_name(), CONTENT_SETTING_BLOCK);
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::COOKIES));
}

TEST_F(HostContentSettingsMapTest, ObserveExceptionPref) {
  TestingProfile profile;
  HostContentSettingsMap* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(&profile);

  PrefService* prefs = profile.GetPrefs();

  // Make a copy of the default pref value so we can reset it later.
  base::Value default_value =
      prefs->FindPreference(GetPrefName(ContentSettingsType::COOKIES))
          ->GetValue()
          ->Clone();

  GURL host("http://example.com");

  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::COOKIES));

  host_content_settings_map->SetContentSettingDefaultScope(
      host, GURL(), ContentSettingsType::COOKIES, CONTENT_SETTING_BLOCK);
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::COOKIES));

  // Make a copy of the pref's new value so we can reset it later.
  base::Value new_value =
      prefs->FindPreference(GetPrefName(ContentSettingsType::COOKIES))
          ->GetValue()
          ->Clone();

  // Clearing the backing pref should also clear the internal cache.
  prefs->Set(GetPrefName(ContentSettingsType::COOKIES), default_value);
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::COOKIES));

  // Resetting the pref to its previous value should update the cache.
  prefs->Set(GetPrefName(ContentSettingsType::COOKIES), new_value);
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::COOKIES));
}

TEST_F(HostContentSettingsMapTest, HostTrimEndingDotCheck) {
  TestingProfile profile;
  HostContentSettingsMap* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(&profile);
  content_settings::CookieSettings* cookie_settings =
      CookieSettingsFactory::GetForProfile(&profile).get();

  GURL host_ending_with_dot("http://example.com./");
  url::Origin origin = url::Origin::Create(host_ending_with_dot);
  net::SiteForCookies site_for_cookies =
      net::SiteForCookies::FromOrigin(origin);

  EXPECT_TRUE(cookie_settings->IsFullCookieAccessAllowed(
      host_ending_with_dot, site_for_cookies, origin,
      net::CookieSettingOverrides(), /*cookie_partition_key=*/std::nullopt));
  host_content_settings_map->SetContentSettingDefaultScope(
      host_ending_with_dot, GURL(), ContentSettingsType::COOKIES,
      CONTENT_SETTING_DEFAULT);
  EXPECT_TRUE(cookie_settings->IsFullCookieAccessAllowed(
      host_ending_with_dot, site_for_cookies, origin,
      net::CookieSettingOverrides(), /*cookie_partition_key=*/std::nullopt));
  host_content_settings_map->SetContentSettingDefaultScope(
      host_ending_with_dot, GURL(), ContentSettingsType::COOKIES,
      CONTENT_SETTING_BLOCK);
  EXPECT_FALSE(cookie_settings->IsFullCookieAccessAllowed(
      host_ending_with_dot, site_for_cookies, origin,
      net::CookieSettingOverrides(), /*cookie_partition_key=*/std::nullopt));

  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                host_ending_with_dot, host_ending_with_dot,
                ContentSettingsType::JAVASCRIPT));
  host_content_settings_map->SetContentSettingDefaultScope(
      host_ending_with_dot, GURL(), ContentSettingsType::JAVASCRIPT,
      CONTENT_SETTING_DEFAULT);
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                host_ending_with_dot, host_ending_with_dot,
                ContentSettingsType::JAVASCRIPT));
  host_content_settings_map->SetContentSettingDefaultScope(
      host_ending_with_dot, GURL(), ContentSettingsType::JAVASCRIPT,
      CONTENT_SETTING_BLOCK);
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                host_ending_with_dot, host_ending_with_dot,
                ContentSettingsType::JAVASCRIPT));

  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                host_ending_with_dot, host_ending_with_dot,
                ContentSettingsType::POPUPS));
  host_content_settings_map->SetContentSettingDefaultScope(
      host_ending_with_dot, GURL(), ContentSettingsType::POPUPS,
      CONTENT_SETTING_DEFAULT);
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                host_ending_with_dot, host_ending_with_dot,
                ContentSettingsType::POPUPS));
  host_content_settings_map->SetContentSettingDefaultScope(
      host_ending_with_dot, GURL(), ContentSettingsType::POPUPS,
      CONTENT_SETTING_ALLOW);
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                host_ending_with_dot, host_ending_with_dot,
                ContentSettingsType::POPUPS));

  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                host_ending_with_dot, host_ending_with_dot,
                ContentSettingsType::AUTOPLAY));
  host_content_settings_map->SetContentSettingDefaultScope(
      host_ending_with_dot, GURL(), ContentSettingsType::AUTOPLAY,
      CONTENT_SETTING_BLOCK);
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                host_ending_with_dot, host_ending_with_dot,
                ContentSettingsType::AUTOPLAY));
  host_content_settings_map->SetContentSettingDefaultScope(
      host_ending_with_dot, GURL(), ContentSettingsType::AUTOPLAY,
      CONTENT_SETTING_DEFAULT);
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                host_ending_with_dot, host_ending_with_dot,
                ContentSettingsType::AUTOPLAY));
}

TEST_F(HostContentSettingsMapTest, NestedSettings) {
  TestingProfile profile;
  HostContentSettingsMap* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(&profile);

  GURL host1("http://example.com/");
  GURL host2("http://b.example.com/");
  GURL host3("http://a.b.example.com/");
  GURL host4("http://a.example.com/");
  GURL host5("http://b.b.example.com/");
  ContentSettingsPattern pattern1 =
      ContentSettingsPattern::FromString("[*.]example.com");
  ContentSettingsPattern pattern2 =
      ContentSettingsPattern::FromString("[*.]b.example.com");
  ContentSettingsPattern pattern3 =
      ContentSettingsPattern::FromString("a.b.example.com");

  // Test nested patterns for one type.
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetDefaultContentSetting(
                ContentSettingsType::COOKIES));
  host_content_settings_map->SetContentSettingCustomScope(
      pattern1, ContentSettingsPattern::Wildcard(),
      ContentSettingsType::COOKIES, CONTENT_SETTING_BLOCK);
  host_content_settings_map->SetContentSettingCustomScope(
      pattern2, ContentSettingsPattern::Wildcard(),
      ContentSettingsType::COOKIES, CONTENT_SETTING_ALLOW);
  host_content_settings_map->SetContentSettingCustomScope(
      pattern3, ContentSettingsPattern::Wildcard(),
      ContentSettingsType::COOKIES, CONTENT_SETTING_BLOCK);
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                host1, host1, ContentSettingsType::COOKIES));
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                host2, host2, ContentSettingsType::COOKIES));
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                host3, host3, ContentSettingsType::COOKIES));
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                host4, host4, ContentSettingsType::COOKIES));
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                host5, host5, ContentSettingsType::COOKIES));

  host_content_settings_map->ClearSettingsForOneType(
      ContentSettingsType::COOKIES);
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetDefaultContentSetting(
                ContentSettingsType::COOKIES));

  GURL https_host1("https://b.example.com/");
  GURL https_host2("https://a.b.example.com/");
  ContentSettingsPattern pattern4 =
      ContentSettingsPattern::FromString("b.example.com");

  host_content_settings_map->SetContentSettingCustomScope(
      pattern4, ContentSettingsPattern::Wildcard(),
      ContentSettingsType::COOKIES, CONTENT_SETTING_BLOCK);
  // Pattern "b.example.com" will affect (http|https)://b.example.com
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                host2, host2, ContentSettingsType::COOKIES));
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                https_host1, https_host1, ContentSettingsType::COOKIES));
  // Pattern "b.example.com" will not affect (http|https)://a.b.example.com
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                host3, host3, ContentSettingsType::COOKIES));
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                https_host2, https_host2, ContentSettingsType::COOKIES));
}

TEST_F(HostContentSettingsMapTest, TypeIsolatedSettings) {
  TestingProfile profile;
  HostContentSettingsMap* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(&profile);

  GURL host("http://example.com/");

  host_content_settings_map->SetContentSettingDefaultScope(
      host, GURL(), ContentSettingsType::COOKIES, CONTENT_SETTING_BLOCK);
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::COOKIES));
  EXPECT_EQ(CONTENT_SETTING_ASK,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::GEOLOCATION));
}

TEST_F(HostContentSettingsMapTest, IncognitoInheritInitialAllow) {
  // The cookie setting has an initial value of ALLOW, so all changes should be
  // inherited from regular to incognito mode.
  TestingProfile profile;
  Profile* otr_profile =
      profile.GetPrimaryOTRProfile(/*create_if_needed=*/true);
  HostContentSettingsMap* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(&profile);
  HostContentSettingsMap* otr_map =
      HostContentSettingsMapFactory::GetForProfile(otr_profile);

  GURL host("http://example.com/");

  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::COOKIES));
  EXPECT_EQ(
      CONTENT_SETTING_ALLOW,
      otr_map->GetContentSetting(host, host, ContentSettingsType::COOKIES));

  // The inherited setting should be included in ContentSettingsForOneType
  // table as well.
  {
    ContentSettingsForOneType otr_settings =
        otr_map->GetSettingsForOneType(ContentSettingsType::COOKIES);
    ASSERT_EQ(1u, otr_settings.size());
    EXPECT_FALSE(otr_settings[0].incognito);
    EXPECT_EQ(CONTENT_SETTING_ALLOW, content_settings::ValueToContentSetting(
                                         otr_settings[0].setting_value));
  }

  // Changing content settings on the main map should also affect the
  // incognito map.
  host_content_settings_map->SetContentSettingDefaultScope(
      host, GURL(), ContentSettingsType::COOKIES, CONTENT_SETTING_SESSION_ONLY);
  EXPECT_EQ(CONTENT_SETTING_SESSION_ONLY,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::COOKIES));
  EXPECT_EQ(
      CONTENT_SETTING_SESSION_ONLY,
      otr_map->GetContentSetting(host, host, ContentSettingsType::COOKIES));

  // Inherited setting + default in ContentSettingsForOneType
  {
    ContentSettingsForOneType otr_settings =
        otr_map->GetSettingsForOneType(ContentSettingsType::COOKIES);
    ASSERT_EQ(2u, otr_settings.size());
    EXPECT_FALSE(otr_settings[0].incognito);
    EXPECT_EQ(
        CONTENT_SETTING_SESSION_ONLY,
        content_settings::ValueToContentSetting(otr_settings[0].setting_value));
    EXPECT_FALSE(otr_settings[1].incognito);
    EXPECT_EQ(CONTENT_SETTING_ALLOW, content_settings::ValueToContentSetting(
                                         otr_settings[1].setting_value));
  }

  host_content_settings_map->SetContentSettingDefaultScope(
      host, GURL(), ContentSettingsType::COOKIES, CONTENT_SETTING_BLOCK);
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::COOKIES));
  EXPECT_EQ(
      CONTENT_SETTING_BLOCK,
      otr_map->GetContentSetting(host, host, ContentSettingsType::COOKIES));

  // Changing content settings on the incognito map should NOT affect the
  // main map.
  otr_map->SetContentSettingDefaultScope(
      host, GURL(), ContentSettingsType::COOKIES, CONTENT_SETTING_ALLOW);
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::COOKIES));
  EXPECT_EQ(
      CONTENT_SETTING_ALLOW,
      otr_map->GetContentSetting(host, host, ContentSettingsType::COOKIES));

  // The GetSettingsForOneType includes incognito setting first, but also
  // inherited ones.
  {
    ContentSettingsForOneType otr_settings =
        otr_map->GetSettingsForOneType(ContentSettingsType::COOKIES);
    ASSERT_EQ(3u, otr_settings.size());
    EXPECT_TRUE(otr_settings[0].incognito);
    EXPECT_EQ(CONTENT_SETTING_ALLOW, content_settings::ValueToContentSetting(
                                         otr_settings[0].setting_value));
    EXPECT_FALSE(otr_settings[1].incognito);
    EXPECT_EQ(CONTENT_SETTING_BLOCK, content_settings::ValueToContentSetting(
                                         otr_settings[1].setting_value));
    EXPECT_FALSE(otr_settings[2].incognito);
    EXPECT_EQ(CONTENT_SETTING_ALLOW, content_settings::ValueToContentSetting(
                                         otr_settings[2].setting_value));
  }
}

TEST_F(HostContentSettingsMapTest, IncognitoInheritPopups) {
  // The popup setting has an initial value of BLOCK, but it is allowed
  // to inherit ALLOW settings because it doesn't provide access to user data.
  TestingProfile profile;
  Profile* otr_profile =
      profile.GetPrimaryOTRProfile(/*create_if_needed=*/true);
  HostContentSettingsMap* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(&profile);
  HostContentSettingsMap* otr_map =
      HostContentSettingsMapFactory::GetForProfile(otr_profile);

  GURL host("http://example.com/");

  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::POPUPS));
  EXPECT_EQ(
      CONTENT_SETTING_BLOCK,
      otr_map->GetContentSetting(host, host, ContentSettingsType::POPUPS));

  // Changing content settings on the main map should affect the
  // incognito map.
  host_content_settings_map->SetContentSettingDefaultScope(
      host, GURL(), ContentSettingsType::POPUPS, CONTENT_SETTING_ALLOW);
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::POPUPS));
  EXPECT_EQ(
      CONTENT_SETTING_ALLOW,
      otr_map->GetContentSetting(host, host, ContentSettingsType::POPUPS));

  // Changing content settings on the incognito map should NOT affect the
  // main map.
  host_content_settings_map->SetContentSettingDefaultScope(
      host, GURL(), ContentSettingsType::POPUPS, CONTENT_SETTING_BLOCK);
  otr_map->SetContentSettingDefaultScope(
      host, GURL(), ContentSettingsType::POPUPS, CONTENT_SETTING_ALLOW);
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::POPUPS));
  EXPECT_EQ(
      CONTENT_SETTING_ALLOW,
      otr_map->GetContentSetting(host, host, ContentSettingsType::POPUPS));
}

// The tested setting is only registered for desktop.
#if !BUILDFLAG(IS_ANDROID)
TEST_F(HostContentSettingsMapTest, IncognitoDontInherit) {
  TestingProfile profile;
  Profile* otr_profile =
      profile.GetPrimaryOTRProfile(/*create_if_needed=*/true);
  auto* map = HostContentSettingsMapFactory::GetForProfile(&profile);
  auto* otr_map = HostContentSettingsMapFactory::GetForProfile(otr_profile);

  GURL url("http://example.com/");
  ContentSettingsType type = ContentSettingsType::DISPLAY_MEDIA_SYSTEM_AUDIO;

  auto* info =
      content_settings::ContentSettingsRegistry::GetInstance()->Get(type);
  ASSERT_EQ(content_settings::ContentSettingsInfo::DONT_INHERIT_IN_INCOGNITO,
            info->incognito_behavior());
  ASSERT_EQ(content_settings::WebsiteSettingsInfo::INHERIT_IN_INCOGNITO,
            info->website_settings_info()->incognito_behavior());

  // These settings should not be inherited to incognito mode.
  map->SetContentSettingDefaultScope(url, url, type, CONTENT_SETTING_ALLOW);
  EXPECT_EQ(CONTENT_SETTING_ALLOW, map->GetContentSetting(url, url, type));
  EXPECT_EQ(CONTENT_SETTING_BLOCK, map->GetDefaultContentSetting(type));

  EXPECT_EQ(CONTENT_SETTING_BLOCK, otr_map->GetContentSetting(url, url, type));
  EXPECT_EQ(CONTENT_SETTING_BLOCK, otr_map->GetDefaultContentSetting(type));

  // Changes to the default should not apply to incognito mode either.
  map->SetDefaultContentSetting(type, CONTENT_SETTING_ALLOW);
  EXPECT_EQ(CONTENT_SETTING_ALLOW, map->GetDefaultContentSetting(type));
  EXPECT_EQ(CONTENT_SETTING_BLOCK, otr_map->GetDefaultContentSetting(type));
}
#endif

TEST_F(HostContentSettingsMapTest, IncognitoPartialInheritPref) {
  // Permissions marked INHERIT_IF_LESS_PERMISSIVE in
  // ContentSettingsRegistry only inherit BLOCK and ASK settings from regular
  // to incognito if the initial value is ASK.
  TestingProfile profile;
  Profile* otr_profile =
      profile.GetPrimaryOTRProfile(/*create_if_needed=*/true);
  HostContentSettingsMap* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(&profile);
  HostContentSettingsMap* otr_map =
      HostContentSettingsMapFactory::GetForProfile(otr_profile);

  GURL host("http://example.com/");

  EXPECT_EQ(CONTENT_SETTING_ASK,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::MEDIASTREAM_MIC));
  EXPECT_EQ(CONTENT_SETTING_ASK,
            otr_map->GetContentSetting(host, host,
                                       ContentSettingsType::MEDIASTREAM_MIC));

  {
    ContentSettingsForOneType otr_settings =
        otr_map->GetSettingsForOneType(ContentSettingsType::MEDIASTREAM_MIC);
    ASSERT_EQ(1u, otr_settings.size());
    EXPECT_FALSE(otr_settings[0].incognito);
    EXPECT_EQ(CONTENT_SETTING_ASK, content_settings::ValueToContentSetting(
                                       otr_settings[0].setting_value));
  }

  // BLOCK should be inherited from the main map to the incognito map.
  host_content_settings_map->SetContentSettingDefaultScope(
      host, GURL(), ContentSettingsType::MEDIASTREAM_MIC,
      CONTENT_SETTING_BLOCK);
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::MEDIASTREAM_MIC));
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            otr_map->GetContentSetting(host, host,
                                       ContentSettingsType::MEDIASTREAM_MIC));

  // GetSettingsForOneType should return preference followed by default, both
  // inherited.
  {
    ContentSettingsForOneType otr_settings =
        otr_map->GetSettingsForOneType(ContentSettingsType::MEDIASTREAM_MIC);
    ASSERT_EQ(2u, otr_settings.size());
    EXPECT_FALSE(otr_settings[0].incognito);
    EXPECT_EQ(CONTENT_SETTING_BLOCK, content_settings::ValueToContentSetting(
                                         otr_settings[0].setting_value));

    EXPECT_FALSE(otr_settings[1].incognito);
    EXPECT_EQ(CONTENT_SETTING_ASK, content_settings::ValueToContentSetting(
                                       otr_settings[1].setting_value));
  }

  // ALLOW should not be inherited from the main map to the incognito map (but
  // it still overwrites the BLOCK, hence incognito reverts to ASK).
  host_content_settings_map->SetContentSettingDefaultScope(
      host, GURL(), ContentSettingsType::MEDIASTREAM_MIC,
      CONTENT_SETTING_ALLOW);
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::MEDIASTREAM_MIC));
  EXPECT_EQ(CONTENT_SETTING_ASK,
            otr_map->GetContentSetting(host, host,
                                       ContentSettingsType::MEDIASTREAM_MIC));

  // The inherited ALLOW gets turned back into ASK in GetSettingsForOneType,
  // mirroring the reverting to ASK behavior above.
  {
    ContentSettingsForOneType otr_settings =
        otr_map->GetSettingsForOneType(ContentSettingsType::MEDIASTREAM_MIC);
    ASSERT_EQ(2u, otr_settings.size());
    EXPECT_FALSE(otr_settings[0].incognito);
    EXPECT_EQ(CONTENT_SETTING_ASK, content_settings::ValueToContentSetting(
                                       otr_settings[0].setting_value));

    EXPECT_FALSE(otr_settings[1].incognito);
    EXPECT_EQ(CONTENT_SETTING_ASK, content_settings::ValueToContentSetting(
                                       otr_settings[1].setting_value));
  }
}

TEST_F(HostContentSettingsMapTest, SetPermissionSettingWithContentSetting) {
  TestingProfile profile;
  auto* map = HostContentSettingsMapFactory::GetForProfile(&profile);
  GURL url("https://example.com");

  // Check that default is ask.
  EXPECT_EQ(
      PermissionSetting{CONTENT_SETTING_ASK},
      map->GetPermissionSetting(url, url, ContentSettingsType::GEOLOCATION));

  // Set to allow.
  map->SetPermissionSettingDefaultScope(
      url, url, ContentSettingsType::GEOLOCATION, CONTENT_SETTING_ALLOW);
  content_settings::SettingInfo info;
  EXPECT_EQ(PermissionSetting{CONTENT_SETTING_ALLOW},
            map->GetPermissionSetting(url, url,
                                      ContentSettingsType::GEOLOCATION, &info));
  EXPECT_EQ(info.source, SettingSource::kUser);
  EXPECT_EQ(info.primary_pattern.ToString(), "https://example.com:443");
  EXPECT_EQ(info.secondary_pattern.ToString(), "*");

  // Reset with nullopt.
  map->SetPermissionSettingDefaultScope(
      url, url, ContentSettingsType::GEOLOCATION, std::nullopt);
  EXPECT_EQ(PermissionSetting{CONTENT_SETTING_ASK},
            map->GetPermissionSetting(url, url,
                                      ContentSettingsType::GEOLOCATION, &info));
  EXPECT_EQ(info.source, SettingSource::kUser);
  EXPECT_EQ(info.primary_pattern.ToString(), "*");
  EXPECT_EQ(info.secondary_pattern.ToString(), "*");

  // Set to block
  map->SetPermissionSettingDefaultScope(
      url, url, ContentSettingsType::GEOLOCATION, CONTENT_SETTING_BLOCK);
  EXPECT_EQ(
      PermissionSetting{CONTENT_SETTING_BLOCK},
      map->GetPermissionSetting(url, url, ContentSettingsType::GEOLOCATION));

  // Reset with DEFAULT.
  map->SetPermissionSettingDefaultScope(
      url, url, ContentSettingsType::GEOLOCATION, CONTENT_SETTING_DEFAULT);
  EXPECT_EQ(
      PermissionSetting{CONTENT_SETTING_ASK},
      map->GetPermissionSetting(url, url, ContentSettingsType::GEOLOCATION));
}

TEST_F(HostContentSettingsMapTest, SetPermissionSettingWithGeolocationSetting) {
  TestingProfile profile;
  auto* map = HostContentSettingsMapFactory::GetForProfile(&profile);
  GURL url("https://example.com");

  // Check default.
  EXPECT_EQ(GeolocationSetting(PermissionOption::kAsk, PermissionOption::kAsk),
            std::get<GeolocationSetting>(map->GetPermissionSetting(
                url, url, ContentSettingsType::GEOLOCATION_WITH_OPTIONS)));

  // Set to Allowed,Denied
  map->SetPermissionSettingDefaultScope(
      url, url, ContentSettingsType::GEOLOCATION_WITH_OPTIONS,
      GeolocationSetting(PermissionOption::kAllowed,
                         PermissionOption::kDenied));

  content_settings::SettingInfo info;
  EXPECT_EQ(
      GeolocationSetting(PermissionOption::kAllowed, PermissionOption::kDenied),
      std::get<GeolocationSetting>(map->GetPermissionSetting(
          url, url, ContentSettingsType::GEOLOCATION_WITH_OPTIONS, &info)));
  EXPECT_EQ(info.source, SettingSource::kUser);
  EXPECT_EQ(info.primary_pattern.ToString(), "https://example.com:443");
  EXPECT_EQ(info.secondary_pattern.ToString(), "*");

  // Reset with nullopt.
  map->SetPermissionSettingDefaultScope(
      url, url, ContentSettingsType::GEOLOCATION_WITH_OPTIONS, std::nullopt);
  EXPECT_EQ(
      GeolocationSetting(PermissionOption::kAsk, PermissionOption::kAsk),
      std::get<GeolocationSetting>(map->GetPermissionSetting(
          url, url, ContentSettingsType::GEOLOCATION_WITH_OPTIONS, &info)));
  EXPECT_EQ(info.source, SettingSource::kUser);
  EXPECT_EQ(info.primary_pattern.ToString(), "*");
  EXPECT_EQ(info.secondary_pattern.ToString(), "*");
}

TEST_F(HostContentSettingsMapTest, SetOneTimeGeolocationSetting) {
  TestingProfile profile;
  auto* map = HostContentSettingsMapFactory::GetForProfile(&profile);
  GURL url("https://example.com");

  // Set one-time Allowed,Denied
  content_settings::ContentSettingConstraints constraints;
  constraints.set_session_model(SessionModel::ONE_TIME);
  map->SetPermissionSettingDefaultScope(
      url, url, ContentSettingsType::GEOLOCATION_WITH_OPTIONS,
      GeolocationSetting(PermissionOption::kAllowed, PermissionOption::kDenied),
      constraints);

  content_settings::SettingInfo info;
  EXPECT_EQ(
      GeolocationSetting(PermissionOption::kAllowed, PermissionOption::kDenied),
      std::get<GeolocationSetting>(map->GetPermissionSetting(
          url, url, ContentSettingsType::GEOLOCATION_WITH_OPTIONS, &info)));
  EXPECT_EQ(info.metadata.session_model(), SessionModel::ONE_TIME);
  EXPECT_EQ(info.source, SettingSource::kUser);
  EXPECT_EQ(info.primary_pattern.ToString(), "https://example.com:443");
  EXPECT_EQ(info.secondary_pattern.ToString(), "*");

  // Reset with nullopt.
  map->SetPermissionSettingDefaultScope(
      url, url, ContentSettingsType::GEOLOCATION_WITH_OPTIONS, std::nullopt);
  EXPECT_EQ(
      GeolocationSetting(PermissionOption::kAsk, PermissionOption::kAsk),
      std::get<GeolocationSetting>(map->GetPermissionSetting(
          url, url, ContentSettingsType::GEOLOCATION_WITH_OPTIONS, &info)));
  EXPECT_EQ(info.source, SettingSource::kUser);
  EXPECT_EQ(info.primary_pattern.ToString(), "*");
  EXPECT_EQ(info.secondary_pattern.ToString(), "*");
}

TEST_F(HostContentSettingsMapTest, SetOneTimeAndPersistentGeolocationSetting) {
  TestingProfile profile;
  auto* map = HostContentSettingsMapFactory::GetForProfile(&profile);
  GURL url("https://example.com");

  // Set persistent approximate grant.
  map->SetPermissionSettingDefaultScope(
      url, url, ContentSettingsType::GEOLOCATION_WITH_OPTIONS,
      GeolocationSetting(PermissionOption::kAllowed, PermissionOption::kAsk),
      content_settings::ContentSettingConstraints());
  {
    content_settings::SettingInfo info;
    EXPECT_EQ(
        GeolocationSetting(PermissionOption::kAllowed, PermissionOption::kAsk),
        std::get<GeolocationSetting>(map->GetPermissionSetting(
            url, url, ContentSettingsType::GEOLOCATION_WITH_OPTIONS, &info)));
    EXPECT_EQ(info.metadata.session_model(), SessionModel::DURABLE);
    EXPECT_EQ(info.source, SettingSource::kUser);
    EXPECT_EQ(info.primary_pattern.ToString(), "https://example.com:443");
    EXPECT_EQ(info.secondary_pattern.ToString(), "*");
  }

  // Set one-time precise grant on top.
  content_settings::ContentSettingConstraints constraints;
  constraints.set_session_model(SessionModel::ONE_TIME);
  map->SetPermissionSettingDefaultScope(
      url, url, ContentSettingsType::GEOLOCATION_WITH_OPTIONS,
      GeolocationSetting(PermissionOption::kAllowed,
                         PermissionOption::kAllowed),
      constraints);
  {
    content_settings::SettingInfo info;
    EXPECT_EQ(
        GeolocationSetting(PermissionOption::kAllowed,
                           PermissionOption::kAllowed),
        std::get<GeolocationSetting>(map->GetPermissionSetting(
            url, url, ContentSettingsType::GEOLOCATION_WITH_OPTIONS, &info)));
    EXPECT_EQ(info.metadata.session_model(), SessionModel::ONE_TIME);
    EXPECT_EQ(info.source, SettingSource::kUser);
    EXPECT_EQ(info.primary_pattern.ToString(), "https://example.com:443");
    EXPECT_EQ(info.secondary_pattern.ToString(), "*");
  }
  std::vector<ContentSettingPatternSource> settings =
      map->GetSettingsForOneType(ContentSettingsType::GEOLOCATION_WITH_OPTIONS);
  EXPECT_THAT(settings, SizeIs(3));

  // Simulate the one-time permission expiring.
  static_cast<OneTimePermissionProvider*>(
      map->content_settings_providers_
          [content_settings::ProviderType::kOneTimePermissionProvider]
              .get())
      ->OnLastPageFromOriginClosed(
          url::Origin::Create(GURL("https://example.com:443")));
  EXPECT_THAT(
      map->GetSettingsForOneType(ContentSettingsType::GEOLOCATION_WITH_OPTIONS),
      SizeIs(2));
  {
    content_settings::SettingInfo info;
    EXPECT_EQ(
        GeolocationSetting(PermissionOption::kAllowed, PermissionOption::kAsk),
        std::get<GeolocationSetting>(map->GetPermissionSetting(
            url, url, ContentSettingsType::GEOLOCATION_WITH_OPTIONS, &info)));
    EXPECT_EQ(info.metadata.session_model(), SessionModel::DURABLE);
    EXPECT_EQ(info.source, SettingSource::kUser);
    EXPECT_EQ(info.primary_pattern.ToString(), "https://example.com:443");
    EXPECT_EQ(info.secondary_pattern.ToString(), "*");
  }
}

TEST_F(HostContentSettingsMapTest,
       SetOneTimeGeolocationGrantWithPersistentPermissionBlocked) {
  TestingProfile profile;
  auto* map = HostContentSettingsMapFactory::GetForProfile(&profile);
  GURL url("https://example.com");

  // Set persistent blocked state.
  map->SetPermissionSettingDefaultScope(
      url, url, ContentSettingsType::GEOLOCATION_WITH_OPTIONS,
      GeolocationSetting(PermissionOption::kDenied, PermissionOption::kDenied),
      content_settings::ContentSettingConstraints());
  {
    content_settings::SettingInfo info;
    EXPECT_EQ(
        GeolocationSetting(PermissionOption::kDenied,
                           PermissionOption::kDenied),
        std::get<GeolocationSetting>(map->GetPermissionSetting(
            url, url, ContentSettingsType::GEOLOCATION_WITH_OPTIONS, &info)));
    EXPECT_EQ(info.metadata.session_model(), SessionModel::DURABLE);
    EXPECT_EQ(info.source, SettingSource::kUser);
    EXPECT_EQ(info.primary_pattern.ToString(), "https://example.com:443");
    EXPECT_EQ(info.secondary_pattern.ToString(), "*");
  }

  // Set one-time approximate grant.
  content_settings::ContentSettingConstraints constraints;
  constraints.set_session_model(SessionModel::ONE_TIME);
  map->SetPermissionSettingDefaultScope(
      url, url, ContentSettingsType::GEOLOCATION_WITH_OPTIONS,
      GeolocationSetting(PermissionOption::kAllowed, PermissionOption::kDenied),
      constraints);
  {
    content_settings::SettingInfo info;
    EXPECT_EQ(
        GeolocationSetting(PermissionOption::kAllowed,
                           PermissionOption::kDenied),
        std::get<GeolocationSetting>(map->GetPermissionSetting(
            url, url, ContentSettingsType::GEOLOCATION_WITH_OPTIONS, &info)));
    EXPECT_EQ(info.metadata.session_model(), SessionModel::ONE_TIME);
    EXPECT_EQ(info.source, SettingSource::kUser);
    EXPECT_EQ(info.primary_pattern.ToString(), "https://example.com:443");
    EXPECT_EQ(info.secondary_pattern.ToString(), "*");
  }
  std::vector<ContentSettingPatternSource> settings =
      map->GetSettingsForOneType(ContentSettingsType::GEOLOCATION_WITH_OPTIONS);
  EXPECT_THAT(settings, SizeIs(3));

  // Simulate the one-time permission expiring.
  static_cast<OneTimePermissionProvider*>(
      map->content_settings_providers_
          [content_settings::ProviderType::kOneTimePermissionProvider]
              .get())
      ->OnLastPageFromOriginClosed(
          url::Origin::Create(GURL("https://example.com:443")));
  EXPECT_THAT(
      map->GetSettingsForOneType(ContentSettingsType::GEOLOCATION_WITH_OPTIONS),
      SizeIs(2));
  {
    content_settings::SettingInfo info;
    EXPECT_EQ(
        GeolocationSetting(PermissionOption::kAsk, PermissionOption::kDenied),
        std::get<GeolocationSetting>(map->GetPermissionSetting(
            url, url, ContentSettingsType::GEOLOCATION_WITH_OPTIONS, &info)));
    EXPECT_EQ(info.metadata.session_model(), SessionModel::DURABLE);
    EXPECT_EQ(info.source, SettingSource::kUser);
    EXPECT_EQ(info.primary_pattern.ToString(), "https://example.com:443");
    EXPECT_EQ(info.secondary_pattern.ToString(), "*");
  }
}

TEST_F(HostContentSettingsMapTest,
       IncognitoInheritGeolocationWithOptionPartialBlocks) {
  // The cookie setting has an initial value of ALLOW, so all changes should be
  // inherited from regular to incognito mode.
  TestingProfile profile;
  Profile* otr_profile =
      profile.GetPrimaryOTRProfile(/*create_if_needed=*/true);
  HostContentSettingsMap* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(&profile);
  HostContentSettingsMap* otr_map =
      HostContentSettingsMapFactory::GetForProfile(otr_profile);

  auto* permission_settings_info =
      content_settings::PermissionSettingsRegistry::GetInstance()->Get(
          ContentSettingsType::GEOLOCATION_WITH_OPTIONS);

  GURL host("http://example.com/");
  EXPECT_EQ(host_content_settings_map->GetPermissionSetting(
                host, host, ContentSettingsType::GEOLOCATION_WITH_OPTIONS),
            permission_settings_info->GetInitialDefaultSetting());

  EXPECT_EQ(otr_map->GetPermissionSetting(
                host, host, ContentSettingsType::GEOLOCATION_WITH_OPTIONS),
            permission_settings_info->GetInitialDefaultSetting());
  {
    host_content_settings_map->SetPermissionSettingDefaultScope(
        host, GURL(), ContentSettingsType::GEOLOCATION_WITH_OPTIONS,
        GeolocationSetting{PermissionOption::kAllowed,
                           PermissionOption::kDenied});
    // Confirm state
    EXPECT_EQ(host_content_settings_map->GetPermissionSetting(
                  host, host, ContentSettingsType::GEOLOCATION_WITH_OPTIONS),
              PermissionSetting(GeolocationSetting{PermissionOption::kAllowed,
                                                   PermissionOption::kDenied}));
    // Should inherit partial block in incognito, but not allow.
    EXPECT_EQ(otr_map->GetPermissionSetting(
                  host, host, ContentSettingsType::GEOLOCATION_WITH_OPTIONS),
              PermissionSetting(GeolocationSetting{PermissionOption::kAsk,
                                                   PermissionOption::kDenied}));
  }

  {
    host_content_settings_map->SetPermissionSettingDefaultScope(
        host, GURL(), ContentSettingsType::GEOLOCATION_WITH_OPTIONS,
        GeolocationSetting{PermissionOption::kAllowed,
                           PermissionOption::kAllowed});

    // Confirm state
    EXPECT_EQ(host_content_settings_map->GetPermissionSetting(
                  host, host, ContentSettingsType::GEOLOCATION_WITH_OPTIONS),
              PermissionSetting(GeolocationSetting{
                  PermissionOption::kAllowed, PermissionOption::kAllowed}));

    // Should not inherit full allow in incognito
    EXPECT_EQ(otr_map->GetPermissionSetting(
                  host, host, ContentSettingsType::GEOLOCATION_WITH_OPTIONS),
              PermissionSetting(GeolocationSetting{PermissionOption::kAsk,
                                                   PermissionOption::kAsk}));
  }

  {
    host_content_settings_map->SetPermissionSettingDefaultScope(
        host, GURL(), ContentSettingsType::GEOLOCATION_WITH_OPTIONS,
        GeolocationSetting{PermissionOption::kDenied,
                           PermissionOption::kDenied});

    // Confirm state
    EXPECT_EQ(host_content_settings_map->GetPermissionSetting(
                  host, host, ContentSettingsType::GEOLOCATION_WITH_OPTIONS),
              PermissionSetting(GeolocationSetting{PermissionOption::kDenied,
                                                   PermissionOption::kDenied}));

    // Should  inherit full block in incognito
    EXPECT_EQ(otr_map->GetPermissionSetting(
                  host, host, ContentSettingsType::GEOLOCATION_WITH_OPTIONS),
              PermissionSetting(GeolocationSetting{PermissionOption::kDenied,
                                                   PermissionOption::kDenied}));
  }
}

TEST_F(HostContentSettingsMapTest, IncognitoPartialInheritDefault) {
  // Permissions marked INHERIT_IF_LESS_PERMISSIVE in
  // ContentSettingsRegistry only inherit BLOCK and ASK settings from regular
  // to incognito if the initial value is ASK.
  TestingProfile profile;
  Profile* otr_profile =
      profile.GetPrimaryOTRProfile(/*create_if_needed=*/true);
  HostContentSettingsMap* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(&profile);
  HostContentSettingsMap* otr_map =
      HostContentSettingsMapFactory::GetForProfile(otr_profile);

  GURL host("http://example.com/");

  EXPECT_EQ(CONTENT_SETTING_ASK,
            host_content_settings_map->GetDefaultContentSetting(
                ContentSettingsType::GEOLOCATION));
  EXPECT_EQ(CONTENT_SETTING_ASK,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::GEOLOCATION));
  EXPECT_EQ(CONTENT_SETTING_ASK, otr_map->GetDefaultContentSetting(
                                     ContentSettingsType::GEOLOCATION));
  EXPECT_EQ(
      CONTENT_SETTING_ASK,
      otr_map->GetContentSetting(host, host, ContentSettingsType::GEOLOCATION));

  // BLOCK should be inherited from the main map to the incognito map.
  host_content_settings_map->SetDefaultContentSetting(
      ContentSettingsType::GEOLOCATION, CONTENT_SETTING_BLOCK);
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetDefaultContentSetting(
                ContentSettingsType::GEOLOCATION));
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::GEOLOCATION));
  EXPECT_EQ(CONTENT_SETTING_BLOCK, otr_map->GetDefaultContentSetting(
                                       ContentSettingsType::GEOLOCATION));
  EXPECT_EQ(
      CONTENT_SETTING_BLOCK,
      otr_map->GetContentSetting(host, host, ContentSettingsType::GEOLOCATION));

  // ALLOW should not be inherited from the main map to the incognito map (but
  // it still overwrites the BLOCK, hence incognito reverts to ASK).
  host_content_settings_map->SetDefaultContentSetting(
      ContentSettingsType::GEOLOCATION, CONTENT_SETTING_ALLOW);
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetDefaultContentSetting(
                ContentSettingsType::GEOLOCATION));
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::GEOLOCATION));
  EXPECT_EQ(CONTENT_SETTING_ASK, otr_map->GetDefaultContentSetting(
                                     ContentSettingsType::GEOLOCATION));
  EXPECT_EQ(
      CONTENT_SETTING_ASK,
      otr_map->GetContentSetting(host, host, ContentSettingsType::GEOLOCATION));
}

TEST_F(HostContentSettingsMapTest, IncognitoInheritCookies) {
  TestingProfile profile;
  Profile* otr_profile =
      profile.GetPrimaryOTRProfile(/*create_if_needed=*/true);
  HostContentSettingsMap* map =
      HostContentSettingsMapFactory::GetForProfile(&profile);
  HostContentSettingsMap* otr_map =
      HostContentSettingsMapFactory::GetForProfile(otr_profile);

  GURL url("http://example.com/");

  map->SetContentSettingCustomScope(
      ContentSettingsPattern::FromURLNoWildcard(url),
      ContentSettingsPattern::FromURLNoWildcard(url),
      ContentSettingsType::COOKIES, CONTENT_SETTING_SESSION_ONLY);

  otr_map->SetContentSettingCustomScope(ContentSettingsPattern::FromURL(url),
                                        ContentSettingsPattern::FromURL(url),
                                        ContentSettingsType::COOKIES,
                                        CONTENT_SETTING_BLOCK);

  EXPECT_EQ(CONTENT_SETTING_SESSION_ONLY,
            map->GetContentSetting(url, url, ContentSettingsType::COOKIES));
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            otr_map->GetContentSetting(url, url, ContentSettingsType::COOKIES));

  auto indices = content_settings::HostIndexedContentSettings::Create(
      otr_map->GetSettingsForOneType(ContentSettingsType::COOKIES));
  ContentSetting result = CONTENT_SETTING_ALLOW;
  for (const auto& index : indices) {
    auto* found = index.Find(url, url);
    if (found) {
      result = content_settings::ValueToContentSetting(found->second.value);
      break;
    }
  }
  EXPECT_EQ(CONTENT_SETTING_BLOCK, result);
}

TEST_F(HostContentSettingsMapTest, IncognitoDontInheritWebsiteSetting) {
  // Website settings marked DONT_INHERIT_IN_INCOGNITO in
  // WebsiteSettingsRegistry (e.g. usb chooser data) don't inherit any values
  // from from regular to incognito.
  TestingProfile profile;
  Profile* otr_profile =
      profile.GetPrimaryOTRProfile(/*create_if_needed=*/true);
  HostContentSettingsMap* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(&profile);
  HostContentSettingsMap* otr_map =
      HostContentSettingsMapFactory::GetForProfile(otr_profile);

  GURL host("http://example.com/");

  // USB chooser data defaults to |nullptr|.
  EXPECT_EQ(base::Value(),
            host_content_settings_map->GetWebsiteSetting(
                host, host, ContentSettingsType::USB_CHOOSER_DATA));
  EXPECT_EQ(base::Value(),
            otr_map->GetWebsiteSetting(host, host,
                                       ContentSettingsType::USB_CHOOSER_DATA));

  base::DictValue test_dict;
  test_dict.Set("test", "value");
  host_content_settings_map->SetWebsiteSettingDefaultScope(
      host, host, ContentSettingsType::USB_CHOOSER_DATA,
      base::Value(test_dict.Clone()));

  // The setting is not inherited by |otr_map|.
  base::Value stored_value = host_content_settings_map->GetWebsiteSetting(
      host, host, ContentSettingsType::USB_CHOOSER_DATA);
  EXPECT_EQ(stored_value, test_dict);
  EXPECT_EQ(base::Value(),
            otr_map->GetWebsiteSetting(host, host,
                                       ContentSettingsType::USB_CHOOSER_DATA));
  {
    ContentSettingsForOneType otr_settings =
        otr_map->GetSettingsForOneType(ContentSettingsType::USB_CHOOSER_DATA);
    // Nothing gets inherited here, and there is no default.
    ASSERT_EQ(0u, otr_settings.size());
  }
}

TEST_F(HostContentSettingsMapTest, IncognitoDontInheritContentSetting) {
  // Content settings marked DONT_INHERIT_IN_INCOGNITO in
  // ContentSettingsRegistry (e.g. Storage Access Header origin trial, which is
  // a special case) don't inherit any values from from regular to incognito.
  TestingProfile profile;
  Profile* otr_profile =
      profile.GetPrimaryOTRProfile(/*create_if_needed=*/true);
  HostContentSettingsMap* map =
      HostContentSettingsMapFactory::GetForProfile(&profile);
  HostContentSettingsMap* otr_map =
      HostContentSettingsMapFactory::GetForProfile(otr_profile);

  GURL host("https://example.com/");

  // Storage Access Header origin trial content settings defaults to BLOCK.
  EXPECT_EQ(
      CONTENT_SETTING_BLOCK,
      map->GetContentSetting(
          host, host, ContentSettingsType::STORAGE_ACCESS_HEADER_ORIGIN_TRIAL));
  EXPECT_EQ(
      CONTENT_SETTING_BLOCK,
      otr_map->GetContentSetting(
          host, host, ContentSettingsType::STORAGE_ACCESS_HEADER_ORIGIN_TRIAL));

  map->SetContentSettingDefaultScope(
      host, host, ContentSettingsType::STORAGE_ACCESS_HEADER_ORIGIN_TRIAL,
      CONTENT_SETTING_ALLOW);

  // The setting is not inherited by |otr_map|.
  EXPECT_EQ(
      CONTENT_SETTING_ALLOW,
      map->GetContentSetting(
          host, host, ContentSettingsType::STORAGE_ACCESS_HEADER_ORIGIN_TRIAL));
  EXPECT_EQ(
      CONTENT_SETTING_BLOCK,
      otr_map->GetContentSetting(
          host, host, ContentSettingsType::STORAGE_ACCESS_HEADER_ORIGIN_TRIAL));
}

TEST_F(HostContentSettingsMapTest, PrefExceptionsOperation) {
  const char kUrl1[] = "http://user_exception_allow.com";
  const char kUrl2[] = "http://user_exception_block.com";
  const char kUrl3[] = "http://non_exception.com";

  TestingProfile profile;
  // Arbitrarily using cookies as content type to test.
  TesterForType tester(&profile, ContentSettingsType::COOKIES);

  // Add |kUrl1| and |kUrl2| only.
  tester.AddUserException(kUrl1, CONTENT_SETTING_ALLOW);
  tester.AddUserException(kUrl2, CONTENT_SETTING_BLOCK);

  // No policy setting: follow users settings.
  tester.ClearPolicyDefault();
  // User exceptions.
  EXPECT_EQ(SettingSource::kUser, tester.GetSettingSourceForURL(kUrl1));
  EXPECT_EQ(SettingSource::kUser, tester.GetSettingSourceForURL(kUrl2));
  // User default.
  EXPECT_EQ(SettingSource::kUser, tester.GetSettingSourceForURL(kUrl3));

  // Policy overrides users always.
  tester.SetPolicyDefault(CONTENT_SETTING_ALLOW);
  EXPECT_EQ(SettingSource::kPolicy, tester.GetSettingSourceForURL(kUrl1));
  EXPECT_EQ(SettingSource::kPolicy, tester.GetSettingSourceForURL(kUrl2));
  EXPECT_EQ(SettingSource::kPolicy, tester.GetSettingSourceForURL(kUrl3));
  tester.SetPolicyDefault(CONTENT_SETTING_BLOCK);
  EXPECT_EQ(SettingSource::kPolicy, tester.GetSettingSourceForURL(kUrl1));
  EXPECT_EQ(SettingSource::kPolicy, tester.GetSettingSourceForURL(kUrl2));
  EXPECT_EQ(SettingSource::kPolicy, tester.GetSettingSourceForURL(kUrl3));
}

TEST_F(HostContentSettingsMapTest, GetUserModifiableContentSetting) {
  GURL url("http://user_exception_allow.com");

  TestingProfile profile;
  // Arbitrarily using cookies as content type to test.
  profile.GetTestingPrefService()->SetManagedPref(
      prefs::kManagedDefaultCookiesSetting,
      std::make_unique<base::Value>(CONTENT_SETTING_BLOCK));

  HostContentSettingsMap* map =
      HostContentSettingsMapFactory::GetForProfile(&profile);
  map->SetContentSettingDefaultScope(url, url, ContentSettingsType::COOKIES,
                                     CONTENT_SETTING_ALLOW);

  EXPECT_EQ(CONTENT_SETTING_ALLOW, map->GetUserModifiableContentSetting(
                                       url, url, ContentSettingsType::COOKIES));
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            map->GetContentSetting(url, url, ContentSettingsType::COOKIES));
}

TEST_F(HostContentSettingsMapTest, GetUserModifiablePermissionSetting) {
  base::test::ScopedFeatureList enable_approximate_location(
      content_settings::features::kApproximateGeolocationPermission);

  GURL url("http://user_exception_allow.com");

  TestingProfile profile;
  // Arbitrarily using cookies as content type to test.
  profile.GetTestingPrefService()->SetManagedPref(
      prefs::kManagedDefaultGeolocationSetting,
      std::make_unique<base::Value>(CONTENT_SETTING_BLOCK));

  HostContentSettingsMap* map =
      HostContentSettingsMapFactory::GetForProfile(&profile);
  map->SetPermissionSettingDefaultScope(
      url, url, ContentSettingsType::GEOLOCATION_WITH_OPTIONS,
      GeolocationSetting{PermissionOption::kAllowed,
                         PermissionOption::kAllowed});

  EXPECT_EQ(PermissionSetting(GeolocationSetting{PermissionOption::kAllowed,
                                                 PermissionOption::kAllowed}),
            map->GetUserModifiablePermissionSetting(
                url, url, ContentSettingsType::GEOLOCATION_WITH_OPTIONS));
  EXPECT_TRUE(
      content_settings::PermissionSettingsRegistry::GetInstance()
          ->Get(ContentSettingsType::GEOLOCATION_WITH_OPTIONS)
          ->delegate()
          .IsBlocked(map->GetPermissionSetting(
              url, url, ContentSettingsType::GEOLOCATION_WITH_OPTIONS)));
}

/**
 * Test that HostContentSettingsMap::GetUserModifiableContentSetting() ignores
 * the relative int value of the providers when determining whether a provider
 * is user-modifiable.
 */
TEST_F(HostContentSettingsMapTest,
       GetUserModifiableContentSetting_IndependentOfProviderEnumValues) {
  EXPECT_LT(content_settings::ProviderType::kPolicyProvider,
            content_settings::ProviderType::kPrefProvider);
  EXPECT_LT(content_settings::ProviderType::kPrefProvider,
            content_settings::ProviderType::kProviderForTests);

  // Arbitrarily using cookies as content type to test.
  GURL url("http://user_exception_allow.com");
  {
    TestingProfile profile;
    ScopedMapNoFactoryTester map_tester(profile);

    profile.GetTestingPrefService()->SetManagedPref(
        prefs::kManagedDefaultCookiesSetting,
        std::make_unique<base::Value>(CONTENT_SETTING_BLOCK));

    scoped_refptr<HostContentSettingsMap> map = map_tester.map;
    map->SetContentSettingDefaultScope(url, url, ContentSettingsType::COOKIES,
                                       CONTENT_SETTING_ALLOW);

    EXPECT_EQ(CONTENT_SETTING_ALLOW,
              map->GetUserModifiableContentSetting(
                  url, url, ContentSettingsType::COOKIES));
    content_settings::SettingInfo info;
    EXPECT_EQ(
        CONTENT_SETTING_BLOCK,
        map->GetContentSetting(url, url, ContentSettingsType::COOKIES, &info));
    // Check that the setting came from ProviderType::kPolicyProvider.
    EXPECT_EQ(SettingSource::kPolicy, info.source);
  }

  {
    TestingProfile profile;

    // Use ScopedMapNoFactoryTester so that
    // HostContentSettingsMap::RegisterProvider() is called immediately after
    // building the HostContentSettingsMap and avoid any calls on
    // HostContentSettingsMap from TestingProfile initializing. This is required
    // due to the thread assertions in
    // HostContentSettingsMap::RegisterProvider().
    ScopedMapNoFactoryTester map_tester(profile);
    auto mock_provider = std::make_unique<content_settings::MockProvider>(
        /*read_only=*/false);
    mock_provider->SetWebsiteSetting(
        ContentSettingsPattern::Wildcard(), ContentSettingsPattern::Wildcard(),
        ContentSettingsType::COOKIES, base::Value(CONTENT_SETTING_BLOCK), {});
    map_tester.map->RegisterProvider(
        content_settings::ProviderType::kProviderForTests,
        std::move(mock_provider));

    EXPECT_EQ(CONTENT_SETTING_ALLOW,
              map_tester.map->GetUserModifiableContentSetting(
                  url, url, ContentSettingsType::COOKIES));
    content_settings::SettingInfo info;
    EXPECT_EQ(CONTENT_SETTING_BLOCK,
              map_tester.map->GetContentSetting(
                  url, url, ContentSettingsType::COOKIES, &info));
    // Check that the setting came from ProviderType::kProviderForTests.
    EXPECT_EQ(SettingSource::kTest, info.source);
  }
}

// For a single Unicode encoded pattern, check if it gets converted to punycode
// and old pattern gets deleted.
TEST_F(HostContentSettingsMapTest, CanonicalizeExceptionsUnicodeOnly) {
  TestingProfile profile;
  PrefService* prefs = profile.GetPrefs();

  // Set utf-8 data.
  {
    ScopedDictPrefUpdate update(prefs,
                                GetPrefName(ContentSettingsType::COOKIES));
    base::DictValue& all_settings_dictionary = update.Get();

    base::DictValue dummy_payload;
    dummy_payload.Set("setting", CONTENT_SETTING_ALLOW);
    all_settings_dictionary.Set("[*.]\xC4\x87ira.com,*",
                                std::move(dummy_payload));
  }

  HostContentSettingsMapFactory::GetForProfile(&profile);

  const base::DictValue& all_settings_dictionary =
      prefs->GetDict(GetPrefName(ContentSettingsType::COOKIES));
  EXPECT_FALSE(all_settings_dictionary.FindDict("[*.]\xC4\x87ira.com,*"));
  EXPECT_TRUE(all_settings_dictionary.FindDict("[*.]xn--ira-ppa.com,*"));
}

// If both Unicode and its punycode pattern exist, make sure we don't touch the
// settings for the punycode, and that Unicode pattern gets deleted.
TEST_F(HostContentSettingsMapTest, CanonicalizeExceptionsUnicodeAndPunycode) {
  TestingProfile profile;

  base::Value value =
      base::JSONReader::Read("{\"[*.]\\xC4\\x87ira.com,*\":{\"setting\":1}}",
                             base::JSON_PARSE_CHROMIUM_EXTENSIONS)
          .value();
  profile.GetPrefs()->Set(GetPrefName(ContentSettingsType::COOKIES), value);

  // Set punycode equivalent, with different setting.
  base::Value puny_value =
      base::JSONReader::Read("{\"[*.]xn--ira-ppa.com,*\":{\"setting\":2}}",
                             base::JSON_PARSE_CHROMIUM_EXTENSIONS)
          .value();
  profile.GetPrefs()->Set(GetPrefName(ContentSettingsType::COOKIES),
                          puny_value);

  // Initialize the content map.
  HostContentSettingsMapFactory::GetForProfile(&profile);

  const base::Value& content_setting_prefs =
      profile.GetPrefs()->GetValue(GetPrefName(ContentSettingsType::COOKIES));
  std::string prefs_as_json =
      base::WriteJson(content_setting_prefs).value_or("");
  EXPECT_STREQ("{\"[*.]xn--ira-ppa.com,*\":{\"setting\":2}}",
               prefs_as_json.c_str());
}

// If a default-content-setting is managed, the managed value should be used
// instead of the default value.
TEST_F(HostContentSettingsMapTest, ManagedDefaultContentSetting) {
  TestingProfile profile;
  HostContentSettingsMap* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(&profile);
  sync_preferences::TestingPrefServiceSyncable* prefs =
      profile.GetTestingPrefService();

  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetDefaultContentSetting(
                ContentSettingsType::JAVASCRIPT));

  // Set managed-default-content-setting through the coresponding preferences.
  prefs->SetManagedPref(prefs::kManagedDefaultJavaScriptSetting,
                        std::make_unique<base::Value>(CONTENT_SETTING_BLOCK));
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetDefaultContentSetting(
                ContentSettingsType::JAVASCRIPT));

  // Remove managed-default-content-settings-preferences.
  prefs->RemoveManagedPref(prefs::kManagedDefaultJavaScriptSetting);
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetDefaultContentSetting(
                ContentSettingsType::JAVASCRIPT));

  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetDefaultContentSetting(
                ContentSettingsType::ADS));

  // Set managed-default-content-setting through the coresponding preferences.
  prefs->SetManagedPref(prefs::kManagedDefaultAdsSetting,
                        std::make_unique<base::Value>(CONTENT_SETTING_ALLOW));
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetDefaultContentSetting(
                ContentSettingsType::ADS));

  // Remove managed-default-content-settings-preferences.
  prefs->RemoveManagedPref(prefs::kManagedDefaultAdsSetting);
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetDefaultContentSetting(
                ContentSettingsType::ADS));
}

TEST_F(HostContentSettingsMapTest, GetNonDefaultContentSettingsIfTypeManaged) {
  TestingProfile profile;
  HostContentSettingsMap* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(&profile);
  sync_preferences::TestingPrefServiceSyncable* prefs =
      profile.GetTestingPrefService();

  // Set url for JavaScript setting.
  GURL host("http://example.com/");
  host_content_settings_map->SetContentSettingDefaultScope(
      host, GURL(), ContentSettingsType::JAVASCRIPT, CONTENT_SETTING_BLOCK);

  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetDefaultContentSetting(
                ContentSettingsType::JAVASCRIPT));

  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::JAVASCRIPT));

  // Set managed-default-content-setting for content-settings-type JavaScript.
  prefs->SetManagedPref(prefs::kManagedDefaultJavaScriptSetting,
                        std::make_unique<base::Value>(CONTENT_SETTING_ALLOW));
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::JAVASCRIPT));
}

// Managed default content setting should have higher priority
// than user defined patterns.
TEST_F(HostContentSettingsMapTest,
       ManagedDefaultContentSettingIgnoreUserPattern) {
  TestingProfile profile;
  HostContentSettingsMap* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(&profile);
  sync_preferences::TestingPrefServiceSyncable* prefs =
      profile.GetTestingPrefService();

  // Block all JavaScript.
  host_content_settings_map->SetDefaultContentSetting(
      ContentSettingsType::JAVASCRIPT, CONTENT_SETTING_BLOCK);

  // Set an exception to allow "[*.]example.com"
  GURL host("http://example.com/");

  host_content_settings_map->SetContentSettingDefaultScope(
      host, GURL(), ContentSettingsType::JAVASCRIPT, CONTENT_SETTING_ALLOW);

  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetDefaultContentSetting(
                ContentSettingsType::JAVASCRIPT));

  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::JAVASCRIPT));

  // Set managed-default-content-settings-preferences.
  prefs->SetManagedPref(prefs::kManagedDefaultJavaScriptSetting,
                        std::make_unique<base::Value>(CONTENT_SETTING_BLOCK));
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::JAVASCRIPT));

  // Remove managed-default-content-settings-preferences.
  prefs->RemoveManagedPref(prefs::kManagedDefaultJavaScriptSetting);
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::JAVASCRIPT));
}

// If a default-content-setting is set to managed setting, the user defined
// setting should be preserved.
TEST_F(HostContentSettingsMapTest, OverwrittenDefaultContentSetting) {
  TestingProfile profile;
  HostContentSettingsMap* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(&profile);
  sync_preferences::TestingPrefServiceSyncable* prefs =
      profile.GetTestingPrefService();

  // Set user defined default-content-setting for Cookies.
  host_content_settings_map->SetDefaultContentSetting(
      ContentSettingsType::COOKIES, CONTENT_SETTING_BLOCK);
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetDefaultContentSetting(
                ContentSettingsType::COOKIES));

  // Set preference to manage the default-content-setting for Cookies.
  prefs->SetManagedPref(prefs::kManagedDefaultCookiesSetting,
                        std::make_unique<base::Value>(CONTENT_SETTING_ALLOW));
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetDefaultContentSetting(
                ContentSettingsType::COOKIES));

  // Remove the preference to manage the default-content-setting for Cookies.
  prefs->RemoveManagedPref(prefs::kManagedDefaultCookiesSetting);
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetDefaultContentSetting(
                ContentSettingsType::COOKIES));
}

// If a setting for a default-content-setting-type is set while the type is
// managed, then the new setting should be preserved and used after the
// default-content-setting-type is not managed anymore.
TEST_F(HostContentSettingsMapTest, SettingDefaultContentSettingsWhenManaged) {
  TestingProfile profile;
  HostContentSettingsMap* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(&profile);
  sync_preferences::TestingPrefServiceSyncable* prefs =
      profile.GetTestingPrefService();

  prefs->SetManagedPref(prefs::kManagedDefaultCookiesSetting,
                        std::make_unique<base::Value>(CONTENT_SETTING_ALLOW));
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetDefaultContentSetting(
                ContentSettingsType::COOKIES));

  host_content_settings_map->SetDefaultContentSetting(
      ContentSettingsType::COOKIES, CONTENT_SETTING_BLOCK);
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetDefaultContentSetting(
                ContentSettingsType::COOKIES));

  prefs->RemoveManagedPref(prefs::kManagedDefaultCookiesSetting);
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetDefaultContentSetting(
                ContentSettingsType::COOKIES));
}

TEST_F(HostContentSettingsMapTest, GetContentSetting) {
  TestingProfile profile;
  HostContentSettingsMap* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(&profile);

  GURL host("http://example.com/");
  GURL embedder("chrome://foo");
  host_content_settings_map->SetContentSettingDefaultScope(
      host, GURL(), ContentSettingsType::COOKIES, CONTENT_SETTING_BLOCK);
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::COOKIES));
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                embedder, host, ContentSettingsType::COOKIES));
}

TEST_F(HostContentSettingsMapTest, AddContentSettingsObserver) {
  TestingProfile profile;
  HostContentSettingsMap* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(&profile);
  content_settings::MockObserver mock_observer;

  GURL host("http://example.com/");
  ContentSettingsPattern pattern =
      ContentSettingsPattern::FromString("[*.]example.com");
  EXPECT_CALL(mock_observer, OnContentSettingChanged(
                                 pattern, ContentSettingsPattern::Wildcard(),
                                 ContentSettingsType::COOKIES));

  host_content_settings_map->AddObserver(&mock_observer);

  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::COOKIES));
  host_content_settings_map->SetContentSettingDefaultScope(
      host, GURL(), ContentSettingsType::COOKIES, CONTENT_SETTING_BLOCK);
}

// Guest profiles do not exist on Android, so don't run these tests there.
#if !BUILDFLAG(IS_ANDROID)
TEST_F(HostContentSettingsMapTest, GuestProfile) {
  TestingProfile::Builder profile_builder;
  profile_builder.SetGuestSession();
  std::unique_ptr<Profile> profile = profile_builder.Build();
  HostContentSettingsMap* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(profile.get());

  GURL host("http://example.com/");
  ContentSettingsPattern pattern =
      ContentSettingsPattern::FromString("[*.]example.com");

  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::COOKIES));

  // Changing content settings should not result in any prefs being stored
  // however the value should be set in memory for OTR-Guest profiles.
  host_content_settings_map->SetContentSettingDefaultScope(
      host, GURL(), ContentSettingsType::COOKIES, CONTENT_SETTING_BLOCK);
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::COOKIES));

  const base::DictValue& all_settings_dictionary =
      profile->GetPrefs()->GetDict(GetPrefName(ContentSettingsType::COOKIES));
  EXPECT_TRUE(all_settings_dictionary.empty());
}

// Default settings should not be modifiable for Guest profile (there is no UI
// to do this).
TEST_F(HostContentSettingsMapTest, GuestProfileDefaultSetting) {
  TestingProfile::Builder profile_builder;
  profile_builder.SetGuestSession();
  std::unique_ptr<Profile> profile = profile_builder.Build();
  HostContentSettingsMap* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(profile.get());

  GURL host("http://example.com/");

  // There are no custom rules, so this should be the default.
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::COOKIES));

  host_content_settings_map->SetDefaultContentSetting(
      ContentSettingsType::COOKIES, CONTENT_SETTING_BLOCK);

  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                host, host, ContentSettingsType::COOKIES));
}
#endif  // !BUILDFLAG(IS_ANDROID)

TEST_F(HostContentSettingsMapTest, InvalidPattern) {
  // This is a regression test for crbug.com/40472343, which fixed a memory leak
  // when a website setting was set under a URL that mapped to an invalid
  // pattern.
  TestingProfile profile;
  HostContentSettingsMap* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(&profile);
  GURL unsupported_url = GURL("view-source:http://www.google.com");
  base::DictValue test_dict;
  test_dict.Set("test", "value");
  host_content_settings_map->SetWebsiteSettingDefaultScope(
      unsupported_url, unsupported_url, ContentSettingsType::APP_BANNER,
      base::Value(std::move(test_dict)));
  EXPECT_EQ(base::Value(), host_content_settings_map->GetWebsiteSetting(
                               unsupported_url, unsupported_url,
                               ContentSettingsType::APP_BANNER));
}

TEST_F(HostContentSettingsMapTest, ClearSettingsForOneTypeWithPredicate) {
  TestingProfile profile;
  HostContentSettingsMap* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(&profile);

  // Patterns with wildcards.
  ContentSettingsPattern pattern =
      ContentSettingsPattern::FromString("[*.]example.org");
  ContentSettingsPattern pattern2 =
      ContentSettingsPattern::FromString("[*.]example.net");

  // Patterns without wildcards.
  GURL url1("https://www.google.com/");
  GURL url2("https://www.google.com/maps");
  GURL url3("http://www.google.com/maps");
  GURL url3_origin_only("http://www.google.com/");

  host_content_settings_map->SetContentSettingCustomScope(
      pattern2, ContentSettingsPattern::Wildcard(),
      ContentSettingsType::COOKIES, CONTENT_SETTING_BLOCK);
  host_content_settings_map->SetContentSettingCustomScope(
      pattern, ContentSettingsPattern::Wildcard(), ContentSettingsType::COOKIES,
      CONTENT_SETTING_BLOCK);
  host_content_settings_map->SetWebsiteSettingCustomScope(
      pattern2, ContentSettingsPattern::Wildcard(),
      ContentSettingsType::APP_BANNER, base::Value(base::Value::Type::DICT));

  // First, test that we clear only COOKIES (not APP_BANNER), and pattern2.
  host_content_settings_map->ClearSettingsForOneTypeWithPredicate(
      ContentSettingsType::COOKIES,
      [&](const ContentSettingPatternSource& setting) {
        return setting.primary_pattern == pattern2;
      });
  ContentSettingsForOneType host_settings =
      host_content_settings_map->GetSettingsForOneType(
          ContentSettingsType::COOKIES);
  // |host_settings| contains default & block.
  EXPECT_EQ(2U, host_settings.size());
  EXPECT_EQ(pattern, host_settings[0].primary_pattern);
  EXPECT_EQ("*", host_settings[0].secondary_pattern.ToString());
  EXPECT_EQ("*", host_settings[1].primary_pattern.ToString());
  EXPECT_EQ("*", host_settings[1].secondary_pattern.ToString());

  host_settings = host_content_settings_map->GetSettingsForOneType(
      ContentSettingsType::APP_BANNER);
  // |host_settings| still contains the value for APP_BANNER.
  EXPECT_EQ(1U, host_settings.size());
  EXPECT_EQ(pattern2, host_settings[0].primary_pattern);
  EXPECT_EQ("*", host_settings[0].secondary_pattern.ToString());

  // Next, test that we do correct pattern matching w/ an origin policy item.
  // We verify that we have no settings stored.
  host_settings = host_content_settings_map->GetSettingsForOneType(
      ContentSettingsType::SITE_ENGAGEMENT);
  EXPECT_EQ(0u, host_settings.size());
  // Add settings.
  host_content_settings_map->SetWebsiteSettingDefaultScope(
      url1, GURL(), ContentSettingsType::SITE_ENGAGEMENT,
      base::Value(base::Value::Type::DICT));
  // This setting should override the one above, as it's the same origin.
  host_content_settings_map->SetWebsiteSettingDefaultScope(
      url2, GURL(), ContentSettingsType::SITE_ENGAGEMENT,
      base::Value(base::Value::Type::DICT));
  host_content_settings_map->SetWebsiteSettingDefaultScope(
      url3, GURL(), ContentSettingsType::SITE_ENGAGEMENT,
      base::Value(base::Value::Type::DICT));
  // Verify we only have two.
  host_settings = host_content_settings_map->GetSettingsForOneType(
      ContentSettingsType::SITE_ENGAGEMENT);
  EXPECT_EQ(2u, host_settings.size());

  // Clear the http one, which we should be able to do w/ the origin only, as
  // the scope of ContentSettingsType::SITE_ENGAGEMENT is
  // REQUESTING_ORIGIN_ONLY_SCOPE.
  ContentSettingsPattern http_pattern =
      ContentSettingsPattern::FromURLNoWildcard(url3_origin_only);
  host_content_settings_map->ClearSettingsForOneTypeWithPredicate(
      ContentSettingsType::SITE_ENGAGEMENT,
      [&](const ContentSettingPatternSource& setting) {
        return setting.primary_pattern == http_pattern;
      });
  // Verify we only have one, and it's url1.
  host_settings = host_content_settings_map->GetSettingsForOneType(
      ContentSettingsType::SITE_ENGAGEMENT);
  EXPECT_EQ(1u, host_settings.size());
  EXPECT_EQ(ContentSettingsPattern::FromURLNoWildcard(url1),
            host_settings[0].primary_pattern);
}

TEST_F(HostContentSettingsMapTest, ClearSettingsWithTimePredicate) {
  TestingProfile profile;
  auto* map = HostContentSettingsMapFactory::GetForProfile(&profile);
  base::Time now = base::Time::Now();
  base::Time back_1_hour = now - base::Hours(1);
  base::Time back_30_days = now - base::Days(30);
  base::Time back_31_days = now - base::Days(31);

  base::SimpleTestClock test_clock;
  test_clock.SetNow(now);
  map->SetClockForTesting(&test_clock);

  GURL url1("https://www.google.com/");
  GURL url2("https://maps.google.com/");
  GURL url3("https://photos.google.com");

  // Add setting for url1.
  map->SetContentSettingDefaultScope(url1, GURL(), ContentSettingsType::POPUPS,
                                     CONTENT_SETTING_BLOCK);

  // Add setting for url2.
  test_clock.SetNow(back_1_hour);
  map->SetContentSettingDefaultScope(url2, GURL(), ContentSettingsType::POPUPS,
                                     CONTENT_SETTING_BLOCK);

  // Add setting for url3 with the timestamp of 31 days old.
  test_clock.SetNow(back_31_days);
  map->SetContentSettingDefaultScope(url3, GURL(), ContentSettingsType::POPUPS,
                                     CONTENT_SETTING_BLOCK);

  // Verify we have three pattern and the default.
  ContentSettingsForOneType host_settings =
      map->GetSettingsForOneType(ContentSettingsType::POPUPS);
  EXPECT_EQ(4u, host_settings.size());

  // Clear all settings since |now|.
  map->ClearSettingsForOneTypeWithPredicate(
      ContentSettingsType::POPUPS, now, base::Time::Max(),
      HostContentSettingsMap::PatternSourcePredicate());

  // Verify we have two pattern (url2, url3) and the default.
  host_settings = map->GetSettingsForOneType(ContentSettingsType::POPUPS);
  EXPECT_EQ(3u, host_settings.size());
  EXPECT_EQ("https://maps.google.com:443",
            host_settings[0].primary_pattern.ToString());
  EXPECT_EQ("https://photos.google.com:443",
            host_settings[1].primary_pattern.ToString());
  EXPECT_EQ("*", host_settings[2].primary_pattern.ToString());

  // Clear all settings since the beginning of time to 30 days old.
  map->ClearSettingsForOneTypeWithPredicate(
      ContentSettingsType::POPUPS, base::Time(), back_30_days,
      HostContentSettingsMap::PatternSourcePredicate());

  // Verify we only have one pattern (url2) and the default.
  host_settings = map->GetSettingsForOneType(ContentSettingsType::POPUPS);
  EXPECT_EQ(2u, host_settings.size());
  EXPECT_EQ("https://maps.google.com:443",
            host_settings[0].primary_pattern.ToString());
  EXPECT_EQ("*", host_settings[1].primary_pattern.ToString());

  // Clear all settings since the beginning of time.
  map->ClearSettingsForOneTypeWithPredicate(
      ContentSettingsType::POPUPS, base::Time(), base::Time::Max(),
      HostContentSettingsMap::PatternSourcePredicate());

  // Verify we only have the default setting.
  host_settings = map->GetSettingsForOneType(ContentSettingsType::POPUPS);
  EXPECT_EQ(1u, host_settings.size());
  EXPECT_EQ("*", host_settings[0].primary_pattern.ToString());
}

TEST_F(HostContentSettingsMapTest, GetSettingLastModified) {
  TestingProfile profile;
  auto* map = HostContentSettingsMapFactory::GetForProfile(&profile);

  base::SimpleTestClock test_clock;
  test_clock.SetNow(base::Time::Now());
  map->SetClockForTesting(&test_clock);

  ContentSettingsForOneType host_settings;

  GURL url("https://www.google.com/");

  // Last modified date for non existent settings should be base::Time().
  base::Time t =
      GetSettingLastModifiedDate(map, url, url, ContentSettingsType::POPUPS);
  EXPECT_EQ(base::Time(), t);

  // Add setting for url.
  map->SetContentSettingDefaultScope(url, GURL(), ContentSettingsType::POPUPS,
                                     CONTENT_SETTING_BLOCK);
  t = GetSettingLastModifiedDate(map, url, url, ContentSettingsType::POPUPS);
  EXPECT_EQ(t, test_clock.Now());

  test_clock.Advance(base::Seconds(1));
  // Modify setting.
  map->SetContentSettingDefaultScope(url, GURL(), ContentSettingsType::POPUPS,
                                     CONTENT_SETTING_ALLOW);

  t = GetSettingLastModifiedDate(map, url, url, ContentSettingsType::POPUPS);
  EXPECT_EQ(t, test_clock.Now());
}

TEST_F(HostContentSettingsMapTest, IsRestrictedToSecureOrigins) {
  TestingProfile profile;
  const auto* map = HostContentSettingsMapFactory::GetForProfile(&profile);
  EXPECT_TRUE(
      map->IsRestrictedToSecureOrigins(ContentSettingsType::GEOLOCATION));

  EXPECT_FALSE(
      map->IsRestrictedToSecureOrigins(ContentSettingsType::JAVASCRIPT));
}

TEST_F(HostContentSettingsMapTest, CanSetNarrowestSetting) {
  TestingProfile profile;
  const auto* map = HostContentSettingsMapFactory::GetForProfile(&profile);

  GURL valid_url("http://google.com");
  EXPECT_TRUE(map->CanSetNarrowestContentSetting(valid_url, valid_url,
                                                 ContentSettingsType::POPUPS));

  GURL invalid_url("about:blank");
  EXPECT_FALSE(map->CanSetNarrowestContentSetting(invalid_url, invalid_url,
                                                  ContentSettingsType::POPUPS));
}

TEST_F(HostContentSettingsMapTest, MigrateSettingsEmbeddingOriginToWildcard) {
  TestingProfile profile;
  HostContentSettingsMap* map =
      HostContentSettingsMapFactory::GetForProfile(&profile);

  GURL origin("https://requester.com");

  ContentSettingsPattern pattern =
      ContentSettingsPattern::FromURLNoWildcard(origin);

  map->AllowInvalidSecondaryPatternForTesting(true);

  map->SetContentSettingCustomScope(pattern, pattern,
                                    ContentSettingsType::GEOLOCATION,
                                    CONTENT_SETTING_ALLOW);

  map->MigrateSettingsPrecedingPermissionDelegationActivation();

  EXPECT_THAT(
      map->GetSettingsForOneType(ContentSettingsType::GEOLOCATION),
      UnorderedElementsAre(
          AllOf(Field(&ContentSettingPatternSource::primary_pattern,
                      ContentSettingsPattern::Wildcard()),
                Field(&ContentSettingPatternSource::secondary_pattern,
                      ContentSettingsPattern::Wildcard()),
                Property(&ContentSettingPatternSource::GetContentSetting,
                         CONTENT_SETTING_ASK)),
          AllOf(Field(&ContentSettingPatternSource::primary_pattern, pattern),
                Field(&ContentSettingPatternSource::secondary_pattern,
                      ContentSettingsPattern::Wildcard()),
                Property(&ContentSettingPatternSource::GetContentSetting,
                         CONTENT_SETTING_ALLOW))));
}

TEST_F(HostContentSettingsMapTest,
       MigrateSettingsEmbeddingOriginToWildcardForGeolocationWithOptions) {
  base::test::ScopedFeatureList enable_approx_geolocation(
      content_settings::features::kApproximateGeolocationPermission);
  TestingProfile profile;
  HostContentSettingsMap* map =
      HostContentSettingsMapFactory::GetForProfile(&profile);

  GURL origin("https://requester.com");

  ContentSettingsPattern pattern =
      ContentSettingsPattern::FromURLNoWildcard(origin);

  map->AllowInvalidSecondaryPatternForTesting(true);

  GeolocationSetting geolocation_setting =
      GeolocationSetting{.approximate = PermissionOption::kAllowed,
                         .precise = PermissionOption::kDenied};
  map->SetPermissionSettingCustomScope(
      pattern, pattern, ContentSettingsType::GEOLOCATION_WITH_OPTIONS,
      geolocation_setting);

  map->MigrateSettingsPrecedingPermissionDelegationActivation();

  auto value_to_permission_setting = [](const base::Value& value) {
    return content_settings::ValueToPermissionSetting(
        content_settings::PermissionSettingsRegistry::GetInstance()->Get(
            ContentSettingsType::GEOLOCATION_WITH_OPTIONS),
        value);
  };

  EXPECT_THAT(
      map->GetSettingsForOneType(ContentSettingsType::GEOLOCATION_WITH_OPTIONS),
      UnorderedElementsAre(
          AllOf(Field(&ContentSettingPatternSource::primary_pattern,
                      ContentSettingsPattern::Wildcard()),
                Field(&ContentSettingPatternSource::secondary_pattern,
                      ContentSettingsPattern::Wildcard()),
                Field(&ContentSettingPatternSource::setting_value,
                      ResultOf(value_to_permission_setting,
                               GeolocationSetting{
                                   .approximate = PermissionOption::kAsk,
                                   .precise = PermissionOption::kAsk}))),
          AllOf(Field(&ContentSettingPatternSource::primary_pattern, pattern),
                Field(&ContentSettingPatternSource::secondary_pattern,
                      ContentSettingsPattern::Wildcard()),
                Field(&ContentSettingPatternSource::setting_value,
                      ResultOf(value_to_permission_setting,
                               geolocation_setting)))));
}

TEST_F(HostContentSettingsMapTest, MigrateRequestingAndTopLevelOriginSettings) {
  TestingProfile profile;
  HostContentSettingsMap* map =
      HostContentSettingsMapFactory::GetForProfile(&profile);

  GURL requesting_origin("https://requester.com");
  GURL embedding_origin("https://embedder.com");

  ContentSettingsPattern requesting_pattern =
      ContentSettingsPattern::FromURLNoWildcard(requesting_origin);
  ContentSettingsPattern embedding_pattern =
      ContentSettingsPattern::FromURLNoWildcard(embedding_origin);

  map->AllowInvalidSecondaryPatternForTesting(true);

  // Set content settings for 2 types that use requesting and top level
  // origin as well as one for a type that doesn't.
  map->SetContentSettingCustomScope(requesting_pattern, embedding_pattern,
                                    ContentSettingsType::GEOLOCATION,
                                    CONTENT_SETTING_ALLOW);
  map->SetContentSettingCustomScope(requesting_pattern, embedding_pattern,
                                    ContentSettingsType::MIDI_SYSEX,
                                    CONTENT_SETTING_ALLOW);

  map->SetContentSettingCustomScope(requesting_pattern, embedding_pattern,
                                    ContentSettingsType::COOKIES,
                                    CONTENT_SETTING_ALLOW);

  map->MigrateSettingsPrecedingPermissionDelegationActivation();

  map->AllowInvalidSecondaryPatternForTesting(false);

  // Verify that all the settings are deleted except the cookies setting.
  ContentSettingsForOneType host_settings =
      map->GetSettingsForOneType(ContentSettingsType::GEOLOCATION);
  EXPECT_EQ(1u, host_settings.size());
  EXPECT_EQ(ContentSettingsPattern::Wildcard(),
            host_settings[0].primary_pattern);
  EXPECT_EQ(ContentSettingsPattern::Wildcard(),
            host_settings[0].secondary_pattern);

  host_settings = map->GetSettingsForOneType(ContentSettingsType::MIDI_SYSEX);
  EXPECT_EQ(1u, host_settings.size());
  EXPECT_EQ(ContentSettingsPattern::Wildcard(),
            host_settings[0].primary_pattern);
  EXPECT_EQ(ContentSettingsPattern::Wildcard(),
            host_settings[0].secondary_pattern);

  host_settings = map->GetSettingsForOneType(ContentSettingsType::COOKIES);
  EXPECT_EQ(2u, host_settings.size());
  EXPECT_EQ(requesting_pattern, host_settings[0].primary_pattern);
  EXPECT_EQ(embedding_pattern, host_settings[0].secondary_pattern);
  EXPECT_EQ(ContentSettingsPattern::Wildcard(),
            host_settings[1].primary_pattern);
  EXPECT_EQ(ContentSettingsPattern::Wildcard(),
            host_settings[1].secondary_pattern);
}

TEST_F(HostContentSettingsMapTest,
       MigrateRequestingAndTopLevelOriginSettingsResetsEmbeddedSetting) {
  TestingProfile profile;
  HostContentSettingsMap* map =
      HostContentSettingsMapFactory::GetForProfile(&profile);

  GURL requesting_origin("https://requester.com");
  GURL embedding_origin("https://embedder.com");

  ContentSettingsPattern requesting_pattern =
      ContentSettingsPattern::FromURLNoWildcard(requesting_origin);
  ContentSettingsPattern embedding_pattern =
      ContentSettingsPattern::FromURLNoWildcard(embedding_origin);

  map->AllowInvalidSecondaryPatternForTesting(true);

  map->SetContentSettingCustomScope(requesting_pattern, embedding_pattern,
                                    ContentSettingsType::GEOLOCATION,
                                    CONTENT_SETTING_BLOCK);
  map->SetContentSettingCustomScope(embedding_pattern, embedding_pattern,
                                    ContentSettingsType::GEOLOCATION,
                                    CONTENT_SETTING_ALLOW);

  map->MigrateSettingsPrecedingPermissionDelegationActivation();

  map->AllowInvalidSecondaryPatternForTesting(false);

  // Verify that all settings for the embedding origin are deleted. This is
  // important so that a user is repropmted if a permission request from an
  // embedded site they had previously blocked makes a new request.
  ContentSettingsForOneType host_settings =
      map->GetSettingsForOneType(ContentSettingsType::GEOLOCATION);
  EXPECT_EQ(1u, host_settings.size());
  EXPECT_EQ(ContentSettingsPattern::Wildcard(),
            host_settings[0].primary_pattern);
  EXPECT_EQ(ContentSettingsPattern::Wildcard(),
            host_settings[0].secondary_pattern);
}

// Creates new instance of PrefProvider and overrides it in
// |host_content_settings_map|.
void ReloadProviders(PrefService* pref_service,
                     HostContentSettingsMap* host_content_settings_map) {
  auto pref_provider = std::make_unique<content_settings::PrefProvider>(
      pref_service, false, true, false);
  content_settings::TestUtils::OverrideProvider(
      host_content_settings_map, std::move(pref_provider),
      content_settings::ProviderType::kPrefProvider);
}

TEST_F(HostContentSettingsMapTest, GetPatternsFromScopingType) {
  const GURL primary_url("http://a.b.example1.com:8080");
  const GURL secondary_url("http://a.b.example2.com:8080");

  TestingProfile profile;
  HostContentSettingsMap* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(&profile);

  // Testing case:
  //   WebsiteSettingsInfo::REQUESTING_ORIGIN_WITH_TOP_ORIGIN_EXCEPTIONS_SCOPE.
  host_content_settings_map->SetContentSettingDefaultScope(
      primary_url, secondary_url, ContentSettingsType::COOKIES,
      CONTENT_SETTING_ALLOW);

  ContentSettingsForOneType settings =
      host_content_settings_map->GetSettingsForOneType(
          ContentSettingsType::COOKIES);

  EXPECT_EQ(settings[0].primary_pattern,
            ContentSettingsPattern::FromURL(primary_url));
  EXPECT_EQ(settings[0].secondary_pattern, ContentSettingsPattern::Wildcard());

  // Testing cases:
  //   WebsiteSettingsInfo::REQUESTING_AND_TOP_SCHEMEFUL_SITE_SCOPE,
  host_content_settings_map->SetContentSettingDefaultScope(
      primary_url, secondary_url, ContentSettingsType::STORAGE_ACCESS,
      CONTENT_SETTING_ALLOW);

  settings = host_content_settings_map->GetSettingsForOneType(
      ContentSettingsType::STORAGE_ACCESS);

  EXPECT_EQ(settings[0].primary_pattern,
            ContentSettingsPattern::FromURLToSchemefulSitePattern(primary_url));
  EXPECT_EQ(
      settings[0].secondary_pattern,
      ContentSettingsPattern::FromURLToSchemefulSitePattern(secondary_url));

  // Testing cases:
  //   WebsiteSettingsInfo::REQUESTING_SCHEMEFUL_SITE_ONLY_SCOPE,
  host_content_settings_map->SetWebsiteSettingDefaultScope(
      primary_url, secondary_url, ContentSettingsType::COOKIE_CONTROLS_METADATA,
      base::Value(base::DictValue()));

  settings = host_content_settings_map->GetSettingsForOneType(
      ContentSettingsType::COOKIE_CONTROLS_METADATA);

  EXPECT_EQ(settings[0].primary_pattern,
            ContentSettingsPattern::FromURLToSchemefulSitePattern(primary_url));
  EXPECT_EQ(settings[0].secondary_pattern, ContentSettingsPattern::Wildcard());

  // Testing cases:
  //   WebsiteSettingsInfo::REQUESTING_ORIGIN_AND_TOP_SCHEMEFUL_SITE_SCOPE,
  host_content_settings_map->SetContentSettingDefaultScope(
      primary_url, secondary_url, ContentSettingsType::TOP_LEVEL_STORAGE_ACCESS,
      CONTENT_SETTING_ALLOW);

  settings = host_content_settings_map->GetSettingsForOneType(
      ContentSettingsType::TOP_LEVEL_STORAGE_ACCESS);

  EXPECT_EQ(settings[0].primary_pattern,
            ContentSettingsPattern::FromURLNoWildcard(primary_url));
  EXPECT_EQ(
      settings[0].secondary_pattern,
      ContentSettingsPattern::FromURLToSchemefulSitePattern(secondary_url));

  // Testing cases:
  //   WebsiteSettingsInfo::REQUESTING_ORIGIN_ONLY_SCOPE,
  //   WebsiteSettingsInfo::TOP_ORIGIN_ONLY_SCOPE,
  //   WebsiteSettingsInfo::GENERIC_SINGLE_ORIGIN_SCOPE.
  for (const auto& kContentSetting :
       {ContentSettingsType::JAVASCRIPT, ContentSettingsType::NOTIFICATIONS,
        ContentSettingsType::GEOLOCATION,
        ContentSettingsType::FEDERATED_IDENTITY_API}) {
    host_content_settings_map->SetContentSettingDefaultScope(
        primary_url, secondary_url, kContentSetting, CONTENT_SETTING_ALLOW);

    settings =
        host_content_settings_map->GetSettingsForOneType(kContentSetting);

    EXPECT_EQ(settings[0].primary_pattern,
              ContentSettingsPattern::FromURLNoWildcard(primary_url));
    EXPECT_EQ(settings[0].secondary_pattern,
              ContentSettingsPattern::Wildcard());
  }
}

TEST_F(HostContentSettingsMapTest, GetPatternsForContentSettingsType) {
  const GURL primary_url("http://a.b.example1.com:8080");
  const GURL secondary_url("http://a.b.example2.com:8080");

  TestingProfile profile;
  HostContentSettingsMapFactory::GetForProfile(&profile);

  // Testing case:
  //   WebsiteSettingsInfo::REQUESTING_ORIGIN_WITH_TOP_ORIGIN_EXCEPTIONS_SCOPE.
  content_settings::PatternPair patterns =
      HostContentSettingsMap::GetPatternsForContentSettingsType(
          primary_url, secondary_url, ContentSettingsType::COOKIES);

  EXPECT_EQ(patterns.first, ContentSettingsPattern::FromURL(primary_url));
  EXPECT_EQ(patterns.second, ContentSettingsPattern::Wildcard());

  // Testing cases:
  //   WebsiteSettingsInfo::REQUESTING_AND_TOP_SCHEMEFUL_SITE_SCOPE,
  patterns = HostContentSettingsMap::GetPatternsForContentSettingsType(
      primary_url, secondary_url, ContentSettingsType::STORAGE_ACCESS);

  EXPECT_EQ(patterns.first,
            ContentSettingsPattern::FromURLToSchemefulSitePattern(primary_url));
  EXPECT_EQ(
      patterns.second,
      ContentSettingsPattern::FromURLToSchemefulSitePattern(secondary_url));

  // Testing cases:
  //   WebsiteSettingsInfo::REQUESTING_SCHEMEFUL_SITE_ONLY_SCOPE,
  patterns = HostContentSettingsMap::GetPatternsForContentSettingsType(
      primary_url, secondary_url,
      ContentSettingsType::COOKIE_CONTROLS_METADATA);

  EXPECT_EQ(patterns.first,
            ContentSettingsPattern::FromURLToSchemefulSitePattern(primary_url));
  EXPECT_EQ(patterns.second, ContentSettingsPattern::Wildcard());

  // Testing cases:
  //   WebsiteSettingsInfo::REQUESTING_ORIGIN_AND_TOP_SCHEMEFUL_SITE_SCOPE,
  patterns = HostContentSettingsMap::GetPatternsForContentSettingsType(
      primary_url, secondary_url,
      ContentSettingsType::TOP_LEVEL_STORAGE_ACCESS);

  EXPECT_EQ(patterns.first,
            ContentSettingsPattern::FromURLNoWildcard(primary_url));
  EXPECT_EQ(
      patterns.second,
      ContentSettingsPattern::FromURLToSchemefulSitePattern(secondary_url));

  // Testing cases:
  //   WebsiteSettingsInfo::TOP_ORIGIN_WITH_RESOURCE_EXCEPTIONS_SCOPE,
  //   WebsiteSettingsInfo::REQUESTING_ORIGIN_ONLY_SCOPE,
  //   WebsiteSettingsInfo::TOP_ORIGIN_ONLY_SCOPE,
  //   WebsiteSettingsInfo::GENERIC_SINGLE_ORIGIN_SCOPE.
  for (const auto& kContentSetting :
       {ContentSettingsType::JAVASCRIPT, ContentSettingsType::NOTIFICATIONS,
        ContentSettingsType::GEOLOCATION,
        ContentSettingsType::FEDERATED_IDENTITY_API}) {
    patterns = HostContentSettingsMap::GetPatternsForContentSettingsType(
        primary_url, secondary_url, kContentSetting);

    EXPECT_EQ(patterns.first,
              ContentSettingsPattern::FromURLNoWildcard(primary_url));
    EXPECT_EQ(patterns.second, ContentSettingsPattern::Wildcard());
  }
}

// Tests if changing a settings in incognito mode does not affects the regular
// mode.
TEST_F(HostContentSettingsMapTest, IncognitoChangesDoNotPersist) {
  TestingProfile profile;
  auto* regular_map = HostContentSettingsMapFactory::GetForProfile(&profile);
  auto* incognito_map = HostContentSettingsMapFactory::GetForProfile(
      profile.GetPrimaryOTRProfile(/*create_if_needed=*/true));
  auto* registry = content_settings::WebsiteSettingsRegistry::GetInstance();

  GURL url("https://example.com");
  ContentSettingsPattern pattern = ContentSettingsPattern::FromURL(url);
  content_settings::SettingInfo setting_info;

  for (const content_settings::WebsiteSettingsInfo* info : *registry) {
    SCOPED_TRACE(info->name());

    // Get regular profile default value.
    base::Value original_value =
        regular_map->GetWebsiteSetting(url, url, info->type(), &setting_info);
    // Get a different valid value for incognito mode.
    base::Value new_value =
        content_settings::TestUtils::GetSomeValue(info->type());
    if (new_value.is_none()) {
      continue;
    }
    // Ensure a different value is received.
    ASSERT_NE(original_value, new_value);

    // Set the different value in incognito mode.
    base::Value incognito_value = new_value.Clone();
    incognito_map->SetWebsiteSettingCustomScope(
        pattern, ContentSettingsPattern::Wildcard(), info->type(),
        std::move(new_value));

    // Ensure incognito mode value is changed.
    EXPECT_EQ(incognito_value, incognito_map->GetWebsiteSetting(
                                   url, url, info->type(), &setting_info));

    // Ensure regular mode value is not changed.
    base::Value regular_mode_value =
        regular_map->GetWebsiteSetting(url, url, info->type(), &setting_info);
    EXPECT_EQ(original_value, regular_mode_value);
  }
}

// Validate that a content setting that uses a different scope/constraint can
// co-exist with another setting
// TODO(crbug.com/398993133): Fix flakes on some Android builders.
#if BUILDFLAG(IS_ANDROID)
#define MAYBE_MixedScopeSettings DISABLED_MixedScopeSettings
#else
#define MAYBE_MixedScopeSettings MixedScopeSettings
#endif
TEST_F(HostContentSettingsMapTest, MAYBE_MixedScopeSettings) {
  TestingProfile profile;
  HostContentSettingsMap* map =
      HostContentSettingsMapFactory::GetForProfile(&profile);

  content_settings::ContentSettingsRegistry::GetInstance()->ResetForTest();
  ReloadProviders(profile.GetPrefs(), map);

  // The following type is used as a sample of the persistent permission type.
  // It can be replaced with any other type if required.
  const ContentSettingsType persistent_type =
      ContentSettingsType::STORAGE_ACCESS;

  const GURL example_url1("https://example.com");
  const GURL example_url2("https://other_site.example");

  // Set default permission to ASK and expect it for a website.
  map->SetDefaultContentSetting(persistent_type, CONTENT_SETTING_ASK);
  EXPECT_EQ(
      CONTENT_SETTING_ASK,
      map->GetContentSetting(example_url1, example_url1, persistent_type));
  EXPECT_EQ(
      CONTENT_SETTING_ASK,
      map->GetContentSetting(example_url2, example_url2, persistent_type));

  // Set permission and expect to retrieve it correctly. This will default to a
  // never expiring Durable permission.
  map->SetContentSettingDefaultScope(example_url1, example_url1,
                                     persistent_type, CONTENT_SETTING_BLOCK);
  // Set a Session only permission for our second url and we expect it should
  // co-exist with the other permission just fine.
  content_settings::ContentSettingConstraints constraints;
  constraints.set_session_model(SessionModel::USER_SESSION);
  map->SetContentSettingDefaultScope(example_url2, example_url2,
                                     persistent_type, CONTENT_SETTING_ALLOW,
                                     constraints);

  EXPECT_EQ(
      CONTENT_SETTING_BLOCK,
      map->GetContentSetting(example_url1, example_url1, persistent_type));
  EXPECT_EQ(
      CONTENT_SETTING_ALLOW,
      map->GetContentSetting(example_url2, example_url2, persistent_type));

  // Restart and expect reset of Session scoped permission to ASK, while keeping
  // the permission of Durable scope.
  ReloadProviders(profile.GetPrefs(), map);

  EXPECT_EQ(
      CONTENT_SETTING_BLOCK,
      map->GetContentSetting(example_url1, example_url1, persistent_type));
  EXPECT_EQ(
      CONTENT_SETTING_ASK,
      map->GetContentSetting(example_url2, example_url2, persistent_type));
}

// Validate that GetSettingsForOneType works with a SessionModel specified.
// We should act like no preference is specified if the value is
// SessionModel::None; otherwise, only the preferences from the specified
// scope should be returned (if any).
// TODO(crbug.com/399254058): flaky on Android
#if BUILDFLAG(IS_ANDROID)
#define MAYBE_GetSettingsForOneTypeWithSessionModel \
  DISABLED_GetSettingsForOneTypeWithSessionModel
#else
#define MAYBE_GetSettingsForOneTypeWithSessionModel \
  GetSettingsForOneTypeWithSessionModel
#endif
TEST_F(HostContentSettingsMapTest,
       MAYBE_GetSettingsForOneTypeWithSessionModel) {
  TestingProfile profile;
  HostContentSettingsMap* map =
      HostContentSettingsMapFactory::GetForProfile(&profile);

  content_settings::ContentSettingsRegistry::GetInstance()->ResetForTest();
  ReloadProviders(profile.GetPrefs(), map);

  // The following type is used as a sample of the persistent permission type.
  // It can be replaced with any other type if required.
  const ContentSettingsType persistent_type =
      ContentSettingsType::STORAGE_ACCESS;

  const GURL example_url1("https://example.com");
  const GURL example_url2("https://other_site.example");

  // Set default permission to ASK and expect it for a website.
  map->SetDefaultContentSetting(persistent_type, CONTENT_SETTING_ASK);
  EXPECT_EQ(
      CONTENT_SETTING_ASK,
      map->GetContentSetting(example_url1, example_url1, persistent_type));
  EXPECT_EQ(
      CONTENT_SETTING_ASK,
      map->GetContentSetting(example_url2, example_url2, persistent_type));

  // Set permissions in two different scopes.
  content_settings::ContentSettingConstraints constraints;
  constraints.set_session_model(SessionModel::DURABLE);
  map->SetContentSettingDefaultScope(example_url1, example_url1,
                                     persistent_type, CONTENT_SETTING_BLOCK,
                                     constraints);
  constraints.set_session_model(SessionModel::USER_SESSION);
  map->SetContentSettingDefaultScope(example_url2, example_url2,
                                     persistent_type, CONTENT_SETTING_ALLOW,
                                     constraints);

  // Validate that if we retrieve all our settings we should see both settings
  // and the default values returned.
  ContentSettingsForOneType settings =
      map->GetSettingsForOneType(persistent_type);
  ASSERT_EQ(3u, settings.size());

  // Validate that using no SessionModel functions the exact same way.
  settings = map->GetSettingsForOneType(persistent_type, std::nullopt);
  ASSERT_EQ(3u, settings.size());

  // Each one/type of settings we set should be retrievable by specifying the
  // specific scope without getting any of the other results. For Durable we
  // should see our set value and the default value.
  settings = map->GetSettingsForOneType(persistent_type, SessionModel::DURABLE);
  ASSERT_EQ(2u, settings.size());

  settings =
      map->GetSettingsForOneType(persistent_type, SessionModel::USER_SESSION);
  ASSERT_EQ(1u, settings.size());

  // Reload to clear our session settings.
  ReloadProviders(profile.GetPrefs(), map);

  // If a scope is specified that has no settings, we should get an empty set
  // returned.
  settings =
      map->GetSettingsForOneType(persistent_type, SessionModel::USER_SESSION);
  ASSERT_EQ(0u, settings.size());
}

class HostContentSettingsMapActiveExpirationTest
    : public HostContentSettingsMapTest,
      public ::testing::WithParamInterface<bool> {
 public:
  HostContentSettingsMapActiveExpirationTest() {
    feature_list_.InitWithFeatureState(
        content_settings::features::kActiveContentSettingExpiry, GetParam());
  }
  HostContentSettingsMapActiveExpirationTest(
      const HostContentSettingsMapActiveExpirationTest&) = delete;
  HostContentSettingsMapActiveExpirationTest& operator=(
      const HostContentSettingsMapActiveExpirationTest&) = delete;

  void RunExpirationMechanismIfFeatureEnabled(HostContentSettingsMap* map,
                                              ContentSettingsType type) {
    if (GetParam()) {
      map->DeleteNearlyExpiredSettingsAndMaybeScheduleNextRun(type);
    }
  }

 private:
  base::test::ScopedFeatureList feature_list_;
};

INSTANTIATE_TEST_SUITE_P(All,
                         HostContentSettingsMapActiveExpirationTest,
                         testing::Bool());

// Validate that the settings array retrieved correctly carries the expiry data
// for settings and they can detect if and when they expire.
// GetSettingsForOneType should also omit any settings that are already expired.
// TODO(crbug.com/398993133): Fix flakes on some Android builders.
#if BUILDFLAG(IS_ANDROID)
#define MAYBE_GetSettingsForOneTypeWithExpiryAndVerifyUmaHistograms \
  DISABLED_GetSettingsForOneTypeWithExpiryAndVerifyUmaHistograms
#else
#define MAYBE_GetSettingsForOneTypeWithExpiryAndVerifyUmaHistograms \
  GetSettingsForOneTypeWithExpiryAndVerifyUmaHistograms
#endif
TEST_P(HostContentSettingsMapActiveExpirationTest,
       MAYBE_GetSettingsForOneTypeWithExpiryAndVerifyUmaHistograms) {
  base::HistogramTester t;
  TestingProfile profile;
  HostContentSettingsMap* map =
      HostContentSettingsMapFactory::GetForProfile(&profile);

  content_settings::ContentSettingsRegistry::GetInstance()->ResetForTest();
  ReloadProviders(profile.GetPrefs(), map);

  // The following type is used as a sample of the persistent permission
  // type. It can be replaced with any other type if required.
  const ContentSettingsType persistent_type =
      ContentSettingsType::STORAGE_ACCESS;

  const GURL example_url1("https://example.com");
  const GURL example_url2("https://other_site.example");
  const GURL example_url3("https://third_site.example");

  // Set default permission to ASK and expect it for a website.
  map->SetDefaultContentSetting(persistent_type, CONTENT_SETTING_ASK);
  EXPECT_EQ(
      CONTENT_SETTING_ASK,
      map->GetContentSetting(example_url1, example_url1, persistent_type));
  EXPECT_EQ(
      CONTENT_SETTING_ASK,
      map->GetContentSetting(example_url2, example_url2, persistent_type));
  EXPECT_EQ(
      CONTENT_SETTING_ASK,
      map->GetContentSetting(example_url3, example_url3, persistent_type));

  // Set permissions with our first two urls with different expiry times and our
  // third with no expiration.
  content_settings::ContentSettingConstraints constraints;
  constraints.set_lifetime(base::Seconds(100));
  constraints.set_session_model(SessionModel::USER_SESSION);
  map->SetContentSettingDefaultScope(example_url1, example_url1,
                                     persistent_type, CONTENT_SETTING_BLOCK,
                                     constraints);
  constraints.set_lifetime(base::Seconds(200));
  map->SetContentSettingDefaultScope(example_url2, example_url2,
                                     persistent_type, CONTENT_SETTING_ALLOW,
                                     constraints);
  constraints.set_lifetime(base::TimeDelta());
  map->SetContentSettingDefaultScope(example_url3, example_url3,
                                     persistent_type, CONTENT_SETTING_ALLOW,
                                     constraints);

  // Validate that we can retrieve all our settings and none of them are
  // expired.
  ContentSettingsForOneType settings =
      map->GetSettingsForOneType(persistent_type, SessionModel::USER_SESSION);
  ASSERT_EQ(3u, settings.size());

  // None of our current settings should be expired, but we'll keep each one to
  // check the validity later on.
  ContentSettingPatternSource url1_setting;
  ContentSettingPatternSource url2_setting;
  ContentSettingPatternSource url3_setting;
  for (const auto& entry : settings) {
    ASSERT_FALSE(entry.IsExpired());
    // Store the relevant settings to check on later.
    if (entry.primary_pattern.Matches(example_url1)) {
      url1_setting = entry;
    } else if (entry.primary_pattern.Matches(example_url2)) {
      url2_setting = entry;
    } else if (entry.primary_pattern.Matches(example_url3)) {
      url3_setting = entry;
    }
  }

  RunExpirationMechanismIfFeatureEnabled(map,
                                         ContentSettingsType::STORAGE_ACCESS);

  // If we Fastforward by 101 seconds we should see only our first setting is
  // expired, we now retrieve 1 less setting and the rest are okay.
  FastForwardTime(base::Seconds(101));
  RunExpirationMechanismIfFeatureEnabled(map,
                                         ContentSettingsType::STORAGE_ACCESS);
  ASSERT_TRUE(url1_setting.IsExpired());
  ASSERT_FALSE(url2_setting.IsExpired());
  ASSERT_FALSE(url3_setting.IsExpired());
  settings =
      map->GetSettingsForOneType(persistent_type, SessionModel::USER_SESSION);
  ASSERT_EQ(2u, settings.size());

  // If we fast forward again we should expire our second setting and drop if
  // from our retrieval list now.
  FastForwardTime(base::Seconds(101));
  RunExpirationMechanismIfFeatureEnabled(map,
                                         ContentSettingsType::STORAGE_ACCESS);
  ASSERT_TRUE(url1_setting.IsExpired());
  ASSERT_TRUE(url2_setting.IsExpired());
  ASSERT_FALSE(url3_setting.IsExpired());
  settings =
      map->GetSettingsForOneType(persistent_type, SessionModel::USER_SESSION);
  ASSERT_EQ(1u, settings.size());

  // If we fast forwarding much further it shouldn't make a difference as our
  // last setting and the default setting should never expire.
  FastForwardTime(base::Minutes(100));
  RunExpirationMechanismIfFeatureEnabled(map,
                                         ContentSettingsType::STORAGE_ACCESS);
  ASSERT_TRUE(url1_setting.IsExpired());
  ASSERT_TRUE(url2_setting.IsExpired());
  ASSERT_FALSE(url3_setting.IsExpired());
  settings =
      map->GetSettingsForOneType(persistent_type, SessionModel::USER_SESSION);
  ASSERT_EQ(1u, settings.size());
}

TEST_F(HostContentSettingsMapTest, StorageAccessMetrics) {
  const ContentSettingsType type = ContentSettingsType::STORAGE_ACCESS;
  const GURL url1("https://example1.com");
  const GURL url2("https://example2.com");
  const GURL url3("https://example3.com");
  const GURL url4("https://example4.com");

  TestingProfile profile;
  auto* map = HostContentSettingsMapFactory::GetForProfile(&profile);
  map->SetContentSettingDefaultScope(url1, url1, type, CONTENT_SETTING_ALLOW);
  map->SetContentSettingDefaultScope(url2, url1, type, CONTENT_SETTING_ALLOW);
  map->SetContentSettingDefaultScope(url2, url2, type, CONTENT_SETTING_ALLOW);
  map->SetContentSettingDefaultScope(url3, url1, type, CONTENT_SETTING_ALLOW);
  map->SetContentSettingDefaultScope(url3, url2, type, CONTENT_SETTING_ALLOW);
  map->SetContentSettingDefaultScope(url3, url3, type, CONTENT_SETTING_BLOCK);
  map->SetContentSettingDefaultScope(url4, url1, type, CONTENT_SETTING_BLOCK);

  base::HistogramTester t;
  auto map2 = base::MakeRefCounted<HostContentSettingsMap>(
      profile.GetPrefs(), false, true, true, true);
  map2->ShutdownOnUIThread();

  std::string base_histogram =
      "ContentSettings.RegularProfile.Exceptions.storage-access";
  t.ExpectUniqueSample(base_histogram, 7, 1);
  t.ExpectUniqueSample(base_histogram + ".Allow", 5, 1);
  t.ExpectUniqueSample(base_histogram + ".Block", 2, 1);
  t.ExpectUniqueSample(base_histogram + ".MaxRequester", 3, 1);
  t.ExpectUniqueSample(base_histogram + ".MaxTopLevel", 4, 1);
}

// TODO(crbug.com/398993133): Fix flakes on some Android builders.
#if BUILDFLAG(IS_ANDROID)
#define MAYBE_RenewContentSetting DISABLED_RenewContentSetting
#else
#define MAYBE_RenewContentSetting RenewContentSetting
#endif
TEST_F(HostContentSettingsMapTest, MAYBE_RenewContentSetting) {
  TestingProfile profile;
  const base::Time now = base::Time::Now();
  const base::Time plus_1_hour = now + base::Hours(1);
  const base::TimeDelta lifetime = base::Days(30);
  const GURL primary_url("https://primary.com");
  const GURL secondary_url("https://secondary.com");

  base::SimpleTestClock test_clock;
  test_clock.SetNow(now);
  auto* map = HostContentSettingsMapFactory::GetForProfile(&profile);

  map->SetClockForTesting(&test_clock);

  content_settings::ContentSettingConstraints constraints(plus_1_hour -
                                                          lifetime);
  constraints.set_lifetime(lifetime);
  map->SetContentSettingDefaultScope(
      primary_url, secondary_url, ContentSettingsType::STORAGE_ACCESS,
      ContentSetting::CONTENT_SETTING_ALLOW, constraints);

  EXPECT_EQ(map->RenewContentSetting(primary_url, secondary_url,
                                     ContentSettingsType::STORAGE_ACCESS,
                                     ContentSetting::CONTENT_SETTING_ALLOW),
            std::make_optional(base::Hours(1)));
}

TEST_F(HostContentSettingsMapTest, Increments3pcSettingsMetrics) {
  TestingProfile profile;
  ContentSettingsPattern wildcard_pattern =
      ContentSettingsPattern::FromString("[*.]foo.com");
  ContentSettingsPattern literal_pattern =
      ContentSettingsPattern::FromString("bar.com");
  ContentSettingsPattern literal_pattern2 =
      ContentSettingsPattern::FromString("baz.com");
  auto* map = HostContentSettingsMapFactory::GetForProfile(&profile);

  content_settings::ContentSettingConstraints constraints;
  constraints.set_lifetime(base::Seconds(100));
  map->SetContentSettingCustomScope(
      ContentSettingsPattern::Wildcard(), literal_pattern,
      ContentSettingsType::COOKIES, CONTENT_SETTING_ALLOW, constraints);
  map->SetContentSettingCustomScope(
      ContentSettingsPattern::Wildcard(), literal_pattern2,
      ContentSettingsType::COOKIES, CONTENT_SETTING_ALLOW);
  map->SetContentSettingCustomScope(
      ContentSettingsPattern::Wildcard(), wildcard_pattern,
      ContentSettingsType::COOKIES, CONTENT_SETTING_ALLOW);

  base::HistogramTester t;
  auto map2 = base::MakeRefCounted<HostContentSettingsMap>(
      profile.GetPrefs(), false, true, true, true);
  map2->ShutdownOnUIThread();

  std::string base_histogram =
      "ContentSettings.RegularProfile.Exceptions.cookies";
  t.ExpectUniqueSample(base_histogram + ".AllowThirdParty", 3, 1);
  t.ExpectUniqueSample(base_histogram + ".TemporaryAllowThirdParty", 1, 1);
  t.ExpectUniqueSample(base_histogram + ".DomainWildcardAllowThirdParty", 1, 1);
}

// Regression test for https://crbug.com/40075934.
TEST_F(HostContentSettingsMapTest, IncognitoInheritSaaAndRenew) {
  TestingProfile profile;
  GURL host("https://example.com/");
  auto type = ContentSettingsType::STORAGE_ACCESS;

  // Create StorageAccess permission in regular profile.
  auto* map = HostContentSettingsMapFactory::GetForProfile(&profile);
  content_settings::ContentSettingConstraints constraint;
  constraint.set_lifetime(base::Hours(1));
  map->SetContentSettingDefaultScope(host, host, type, CONTENT_SETTING_ALLOW,
                                     constraint);

  // Create OTR profile.
  Profile* otr_profile =
      profile.GetPrimaryOTRProfile(/*create_if_needed=*/true);
  auto* otr_map = HostContentSettingsMapFactory::GetForProfile(otr_profile);

  // Check that only the regular profile is allowed.
  EXPECT_EQ(CONTENT_SETTING_ALLOW, map->GetContentSetting(host, host, type));
  EXPECT_EQ(CONTENT_SETTING_ASK, otr_map->GetContentSetting(host, host, type));

  // Renew the setting on the OTR profile and check that it still returns ASK.
  otr_map->RenewContentSetting(host, host, type,
                               ContentSetting::CONTENT_SETTING_ALLOW);
  EXPECT_EQ(CONTENT_SETTING_ASK, otr_map->GetContentSetting(host, host, type));
}

TEST_F(HostContentSettingsMapTest, ShutdownDuringExpirationAsanTest) {
  TestingProfile profile;

  auto host_content_settings_map = base::MakeRefCounted<HostContentSettingsMap>(
      profile.GetPrefs(), false, true, true, true);
  ContentSettingsPattern pattern =
      ContentSettingsPattern::FromString("[*.]example.com");

  base::TimeDelta ttl = base::Seconds(1);
  content_settings::ContentSettingConstraints constraints;
  constraints.set_lifetime(ttl);

  host_content_settings_map->SetContentSettingCustomScope(
      pattern, ContentSettingsPattern::Wildcard(),
      ContentSettingsType::GEOLOCATION, CONTENT_SETTING_ALLOW, constraints);

  host_content_settings_map->ShutdownOnUIThread();
  FastForwardTime(ttl);
}

// File access is not implemented on Android. Luckily we don't need it for
// DevTools.
#if !BUILDFLAG(IS_ANDROID)
TEST_F(HostContentSettingsMapTest, DevToolsFileAccess) {
  TestingProfile profile;
  HostContentSettingsMap* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(&profile);

  GURL devtools_host("devtools://devtools/bundled/devtools_app.html");
  GURL example_host("https://example.com");

  host_content_settings_map->SetDefaultContentSetting(
      ContentSettingsType::FILE_SYSTEM_WRITE_GUARD, CONTENT_SETTING_BLOCK);
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            host_content_settings_map->GetContentSetting(
                devtools_host, devtools_host,
                ContentSettingsType::FILE_SYSTEM_WRITE_GUARD));
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            host_content_settings_map->GetContentSetting(
                example_host, example_host,
                ContentSettingsType::FILE_SYSTEM_WRITE_GUARD));
}
#endif  // !BUILDFLAG(IS_ANDROID)

#if BUILDFLAG(ENABLE_EXTENSIONS_CORE)
TEST_F(HostContentSettingsMapTest, ExtensionContentSetting) {
  TestingProfile profile;
  HostContentSettingsMap* map =
      HostContentSettingsMapFactory::GetForProfile(&profile);

  const std::string extension_id = "abcdefghijklmnopqrstuvwxyzabcdef";
  const std::string extension_url_str = "chrome-extension://" + extension_id;
  const GURL extension_url(extension_url_str + "/index.html");
  map->SetContentSettingDefaultScope(
      extension_url, GURL(), ContentSettingsType::SOUND, CONTENT_SETTING_BLOCK);

  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            map->GetContentSetting(extension_url, extension_url,
                                   ContentSettingsType::SOUND));

  // Verify the setting is not applied to a web URL that has the same host as
  // the extension ID.
  const GURL domain_url("https://" + extension_id);
  EXPECT_NE(CONTENT_SETTING_BLOCK,
            map->GetContentSetting(domain_url, domain_url,
                                   ContentSettingsType::SOUND));
}

TEST_F(HostContentSettingsMapTest, ExtensionPermissionsProvider) {
  TestingProfile profile;

  scoped_refptr<const extensions::Extension> ext1 =
      extensions::ExtensionBuilder("Test Extension 1").Build();
  scoped_refptr<const extensions::Extension> ext2 =
      extensions::ExtensionBuilder("Test Extension 2").Build();

  // Add api permission geolocation for ext1.
  extensions::APIPermissionSet apis;
  apis.insert(extensions::mojom::APIPermissionID::kGeolocation);
  ext1->permissions_data()->SetPermissions(
      std::make_unique<extensions::PermissionSet>(
          std::move(apis), extensions::ManifestPermissionSet(),
          extensions::URLPatternSet(), extensions::URLPatternSet()),
      std::make_unique<extensions::PermissionSet>());

  auto* registry = extensions::ExtensionRegistry::Get(&profile);
  registry->AddEnabled(ext1);
  registry->AddEnabled(ext2);
  registry->TriggerOnLoaded(ext1.get());
  registry->TriggerOnLoaded(ext2.get());

  // Validate ext1 is allowed, ext2 is ask.
  HostContentSettingsMap* map =
      HostContentSettingsMapFactory::GetForProfile(&profile);
  EXPECT_EQ(CONTENT_SETTING_ALLOW,
            map->GetContentSetting(ext1->url(), ext1->url(),
                                   ContentSettingsType::GEOLOCATION));
  EXPECT_EQ(CONTENT_SETTING_ASK,
            map->GetContentSetting(ext2->url(), ext2->url(),
                                   ContentSettingsType::GEOLOCATION));

  // Override ext1 to block, ext2 still ask.
  map->SetContentSettingCustomScope(
      ContentSettingsPattern::FromURL(ext1->url()),
      ContentSettingsPattern::Wildcard(), ContentSettingsType::GEOLOCATION,
      CONTENT_SETTING_BLOCK);
  EXPECT_EQ(CONTENT_SETTING_BLOCK,
            map->GetContentSetting(ext1->url(), ext1->url(),
                                   ContentSettingsType::GEOLOCATION));
  EXPECT_EQ(CONTENT_SETTING_ASK,
            map->GetContentSetting(ext2->url(), ext2->url(),
                                   ContentSettingsType::GEOLOCATION));
}

#endif  // BUILDFLAG(ENABLE_EXTENSIONS_CORE)

TEST_F(HostContentSettingsMapTest, RecordDefaultSensorsSetting) {
  TestingProfile profile;
  HostContentSettingsMap* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(&profile);

  constexpr ContentSetting kDefaultSettingsToTest[] = {
      CONTENT_SETTING_ALLOW, CONTENT_SETTING_BLOCK, CONTENT_SETTING_ASK};

  for (ContentSetting setting : kDefaultSettingsToTest) {
    base::HistogramTester histogram_tester;
    host_content_settings_map->SetDefaultContentSetting(
        ContentSettingsType::SENSORS, setting);
    auto map = base::MakeRefCounted<HostContentSettingsMap>(
        profile.GetPrefs(),
        /*is_off_the_record=*/false,
        /*store_last_modified=*/false,
        /*restore_session=*/false,
        /*should_record_metrics=*/true);

    histogram_tester.ExpectUniqueSample(
        "ContentSettings.RegularProfile.DefaultSensorsSetting", setting, 1);

    map->ShutdownOnUIThread();
  }
}

TEST_F(HostContentSettingsMapTest, DeleteStorageAccessRwsGrantsOnStartup) {
  TestingProfile profile;

  // 1. Enable the feature.
  base::test::ScopedFeatureList feature_list;
  feature_list.InitAndEnableFeature(
      content_settings::features::kStorageAccessAPIRelatedWebsiteSets);

  // Create map and inject grant.
  scoped_refptr<HostContentSettingsMap> map_with_feature_enabled =
      base::MakeRefCounted<HostContentSettingsMap>(
          profile.GetPrefs(), /*is_off_the_record=*/false,
          /*store_last_modified=*/false, /*restore_session=*/false,
          /*should_record_metrics=*/false);

  GURL requesting_url("https://requester.com");
  GURL embedding_url("https://embedder.com");

  content_settings::ContentSettingConstraints constraints;
  constraints.set_decided_by_related_website_sets(true);

  map_with_feature_enabled->SetContentSettingDefaultScope(
      requesting_url, embedding_url, ContentSettingsType::STORAGE_ACCESS,
      CONTENT_SETTING_ALLOW, constraints);

  // Verify it is there.
  EXPECT_EQ(CONTENT_SETTING_ALLOW, map_with_feature_enabled->GetContentSetting(
                                       requesting_url, embedding_url,
                                       ContentSettingsType::STORAGE_ACCESS));

  // Shutdown map_with_feature_enabled to make sure it is not used anymore.
  map_with_feature_enabled->ShutdownOnUIThread();
  map_with_feature_enabled.reset();

  // 2. Disable the feature.
  feature_list.Reset();
  feature_list.InitAndDisableFeature(
      content_settings::features::kStorageAccessAPIRelatedWebsiteSets);

  // Create a new map with the same prefs.
  scoped_refptr<HostContentSettingsMap> map_after_feature_disabled =
      base::MakeRefCounted<HostContentSettingsMap>(
          profile.GetPrefs(), /*is_off_the_record=*/false,
          /*store_last_modified=*/false, /*restore_session=*/false,
          /*should_record_metrics=*/false);

  // Verify the grant is gone (deleted on startup).
  EXPECT_EQ(CONTENT_SETTING_ASK, map_after_feature_disabled->GetContentSetting(
                                     requesting_url, embedding_url,
                                     ContentSettingsType::STORAGE_ACCESS));

  map_after_feature_disabled->ShutdownOnUIThread();
}