Skip to content

Two sandboxed iframes are in different agent clusters #60311

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
annevk wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Two sandboxed iframes are in different agent clusters #60311

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
59 changes: 59 additions & 0 deletions .../origin/origin-keyed-agent-clusters/getter-special-cases/two-sandboxed-iframes.https.html
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,59 @@
<!DOCTYPE html>
<meta charset="utf-8">
<title>Two sandboxed iframes are in different agent clusters</title>
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>

<div id="log"></div>

<script type="module">
// Each sandboxed iframe (without allow-same-origin) gets a unique opaque
// origin and so should be in its own agent cluster. Sending a
// WebAssembly.Module from one sandboxed iframe to another should therefore
// fire messageerror, not a successful message event.

const helperSrcdoc = `
<script>
addEventListener("message", e => {
if (e.data && e.data.cmd === "send-wasm") {
const wasm = new WebAssembly.Module(new Uint8Array([0,97,115,109,1,0,0,0]));
parent.frames[e.data.targetIndex].postMessage(wasm, "*");
return;
}
if (e.data instanceof WebAssembly.Module) {
parent.postMessage({ result: "message" }, "*");
}
});
addEventListener("messageerror", () => {
parent.postMessage({ result: "messageerror" }, "*");
});
<\/script>
`;

function insertSandboxedIframe() {
const iframe = document.createElement("iframe");
iframe.sandbox = "allow-scripts";
iframe.srcdoc = helperSrcdoc;
const loaded = new Promise(resolve => iframe.addEventListener("load", resolve));
document.body.append(iframe);
return loaded.then(() => iframe);
}

function nextResult() {
return new Promise(resolve => {
addEventListener("message", e => {
if (e.data && e.data.result)
resolve(e.data.result);
}, { once: true });
});
}

promise_test(async () => {
const iframe1 = await insertSandboxedIframe();
await insertSandboxedIframe();

const result = nextResult();
iframe1.contentWindow.postMessage({ cmd: "send-wasm", targetIndex: 1 }, "*");
assert_equals(await result, "messageerror");
}, "Sending a WebAssembly.Module between two sandboxed iframes must fire messageerror");
</script>
Loading