/* * Copyright (C) 2021 Apple Inc. All rights reserved. * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * 1. Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer. * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. * * THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS'' * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF * THE POSSIBILITY OF SUCH DAMAGE. */ #import "config.h" #if PLATFORM(MAC) #import "HTTPServer.h" #import "PlatformUtilities.h" #import "Test.h" #import "TestNavigationDelegate.h" #import "TestWKWebView.h" #import "WKWebViewConfigurationExtras.h" #import #import #import #import #import #import namespace TestWebKitAPI { static RetainPtr consoleMessages; static void didReceivePageMessageFromInjectedBundle(WKPageRef, WKStringRef messageName, WKTypeRef message, const void*) { if (WKStringIsEqualToUTF8CString(messageName, "ConsoleMessage")) [consoleMessages addObject:Util::toNS((WKStringRef)message)]; } static void setInjectedBundleClient(WKWebView *webView) { WKPageInjectedBundleClientV0 injectedBundleClient = { { 0, nullptr }, didReceivePageMessageFromInjectedBundle, nullptr, }; WKPageSetPageInjectedBundleClient(webView._pageRefForTransitionToWKWebView, &injectedBundleClient.base); } TEST(WKWebView, FTPMainResource) { WKWebViewConfiguration *configuration = [WKWebViewConfiguration _test_configurationWithTestPlugInClassName:@"BundlePageConsoleMessage"]; auto webView = adoptNS([[TestWKWebView alloc] initWithFrame:CGRectMake(0, 0, 800, 600) configuration:configuration]); setInjectedBundleClient(webView.get()); consoleMessages = [NSMutableArray arrayWithCapacity:2]; [webView loadRequest:[NSURLRequest requestWithURL:[NSURL URLWithString:@"ftp://example.com/main.html"]]]; [webView _test_waitForDidFailProvisionalNavigation]; EXPECT_EQ([consoleMessages count], 1u); EXPECT_TRUE([consoleMessages.get()[0] isEqualToString:@"FTP URLs are disabled"]); } TEST(WKWebView, FTPMainResourceRedirect) { HTTPServer httpServer({ { "/ftp_redirect"_s, { 301, {{ "Location"_s, "ftp://example.com/"_s }} } }, }); WKWebViewConfiguration *configuration = [WKWebViewConfiguration _test_configurationWithTestPlugInClassName:@"BundlePageConsoleMessage"]; auto webView = adoptNS([[TestWKWebView alloc] initWithFrame:CGRectMake(0, 0, 800, 600) configuration:configuration]); setInjectedBundleClient(webView.get()); consoleMessages = [NSMutableArray arrayWithCapacity:2]; [webView loadRequest:httpServer.request("/ftp_redirect"_s)]; [webView _test_waitForDidFailProvisionalNavigation]; EXPECT_EQ([consoleMessages count], 1u); EXPECT_TRUE([consoleMessages.get()[0] isEqualToString:@"FTP URLs are disabled"]); } static const char* subresourceBytes = R"FTPRESOURCE( Hello Goodbye )FTPRESOURCE"; TEST(WKWebView, FTPSubresource) { WKWebViewConfiguration *configuration = [WKWebViewConfiguration _test_configurationWithTestPlugInClassName:@"BundlePageConsoleMessage"]; auto webView = adoptNS([[TestWKWebView alloc] initWithFrame:CGRectMake(0, 0, 800, 600) configuration:configuration]); setInjectedBundleClient(webView.get()); consoleMessages = [NSMutableArray arrayWithCapacity:2]; [webView synchronouslyLoadHTMLString:[NSString stringWithUTF8String:subresourceBytes]]; EXPECT_EQ([consoleMessages count], 2u); EXPECT_TRUE([consoleMessages.get()[0] isEqualToString:@"FTP URLs are disabled"]); EXPECT_TRUE([consoleMessages.get()[1] isEqualToString:@"Cannot load image ftp://example.com/webkitten.png due to access control checks."]); } // Redirect from HTTP to FTP already fails, but let's make sure it keeps failing TEST(WKWebView, FTPSubresourceRedirect) { HTTPServer httpServer({ { "/webkitten.png"_s, { 301, {{ "Location"_s, "ftp://example.com/webkitten.png"_s }} } }, }); WKWebViewConfiguration *configuration = [WKWebViewConfiguration _test_configurationWithTestPlugInClassName:@"BundlePageConsoleMessage"]; auto webView = adoptNS([[TestWKWebView alloc] initWithFrame:CGRectMake(0, 0, 800, 600) configuration:configuration]); // Allow HTTP to redirect away from HTTP for subresources for the purposes of this test auto preferences = (__bridge WKPreferencesRef)[[webView configuration] preferences]; WKPreferencesSetRestrictedHTTPResponseAccess(preferences, false); setInjectedBundleClient(webView.get()); consoleMessages = [NSMutableArray arrayWithCapacity:2]; auto htmlString = makeString(""); [webView synchronouslyLoadHTMLString:[NSString stringWithUTF8String:htmlString.utf8().data()]]; EXPECT_EQ([consoleMessages count], 2u); EXPECT_TRUE([consoleMessages.get()[0] isEqualToString:@"FTP URLs are disabled"]); } } // namespace TestWebKitAPI #endif // PLATFORM(MAC)