// Copyright 2018 The Chromium Authors // Use of this source code is governed by a BSD-style license that can be // found in the LICENSE file. // This file contains the ResponseAnalyzerTests (which test the response // analyzer's behavior in several parameterized test scenarios) and at the end // includes the CrossOriginReadBlockingTests, which are more typical unittests. #include "services/network/orb/orb_sniffers.h" #include #include #include #include #include #include #include "net/base/mime_sniffer.h" #include "testing/gmock/include/gmock/gmock.h" #include "testing/gtest/include/gtest/gtest.h" namespace network::orb { TEST(OrbSnifferTest, SniffForHTML) { // Something that technically matches the start of a valid HTML tag. EXPECT_EQ(SniffingResult::kYes, SniffForHTML(" \t\r\n \n")); // All whitespace characters listed by // https://infra.spec.whatwg.org/#ascii-whitespace // (regression test for https://crbug.com/527665262). const std::array, 5> kWhitespaceStrings{{ {"\u0009", "tab"}, {"\u000a", "lf"}, {"\u000c", "ff"}, {"\u000d", "cr"}, {"\u0020", "space"}, }}; for (const auto& kTestInput : kWhitespaceStrings) { SCOPED_TRACE(testing::Message() << "Testing `" << kTestInput.second << "`"); std::string input; input += kTestInput.first; input += ""; EXPECT_EQ(SniffingResult::kYes, SniffForHTML(input)); } // HTML comment, whitespace, more HTML comments, HTML tags. EXPECT_EQ( SniffingResult::kYes, SniffForHTML( "\n\n")); // HTML comment followed by valid HTML tag. EXPECT_EQ(SniffingResult::kYes, SniffForHTML("\n")); // Whitespace followed by valid Javascript. EXPECT_EQ(SniffingResult::kNo, SniffForHTML(" var name=window.location;\nadfadf")); // HTML comment followed by valid Javascript. EXPECT_EQ( SniffingResult::kNo, SniffForHTML( " \nwindow.open()")); // HTML/Javascript polyglot should return kNo. EXPECT_EQ(SniffingResult::kNo, SniffForHTML( "")); // Tests to cover more of MaybeSkipHtmlComment. EXPECT_EQ(SniffingResult::kMaybe, SniffForHTML("")); EXPECT_EQ(SniffingResult::kMaybe, SniffForHTML("")); EXPECT_EQ(SniffingResult::kYes, SniffForHTML("\n")); EXPECT_EQ(SniffingResult::kYes, SniffForHTML("\n")); EXPECT_EQ(SniffingResult::kMaybe, SniffForHTML(" ")); EXPECT_EQ(SniffingResult::kYes, SniffForHTML("\n")); EXPECT_EQ(SniffingResult::kYes, SniffForHTML("\r")); EXPECT_EQ(SniffingResult::kYes, SniffForHTML("\n")); // HTML spec only allows *ASCII* whitespace before the first html element. // See also https://html.spec.whatwg.org/multipage/syntax.html and // https://infra.spec.whatwg.org/#ascii-whitespace. EXPECT_EQ(SniffingResult::kNo, SniffForHTML("\u2028")); EXPECT_EQ(SniffingResult::kNo, SniffForHTML("\u2029")); // Order of line terminators. EXPECT_EQ(SniffingResult::kYes, SniffForHTML("\n\rx")); EXPECT_EQ(SniffingResult::kYes, SniffForHTML("\r\nx")); EXPECT_EQ(SniffingResult::kNo, SniffForHTML("\nx\r")); EXPECT_EQ(SniffingResult::kNo, SniffForHTML("\rx\n")); EXPECT_EQ(SniffingResult::kYes, SniffForHTML("\n\u2028x")); EXPECT_EQ(SniffingResult::kNo, SniffForHTML("\u2028\n")); // In UTF8 encoding is 0xE2 0x80 0xA8 and is 0xE2 0x80 0xA9. // Let's verify that presence of 0xE2 alone doesn't throw // FindFirstJavascriptLineTerminator into an infinite loop. EXPECT_EQ(SniffingResult::kYes, SniffForHTML(" \xe2 \n \xe2\x80 \n \x80 \n \n-->\nx"); EXPECT_EQ(SniffingResult::kNo, SniffForHTML(commented_out_html_tag_data)); // Prefixes of |commented_out_html_tag_data| should be indeterminate. // This covers testing " no newline yet")); // UTF-8 BOM (https://en.wikipedia.org/wiki/Byte_order_mark#UTF-8) followed by // valid HTML tags. EXPECT_EQ(SniffingResult::kYes, SniffForHTML("\xEF\xBB\xBF")); } TEST(OrbSnifferTest, SniffForXML) { std::string_view xml_data( " \t \r \n \f \n \n