ChangeLog

2014-10-11  Mike West  <mkwst@chromium.org>

        Referrer Policy: Update <meta name="referrer"> values to match the spec

        https://bugs.webkit.org/show_bug.cgi?id=137635

        Reviewed by NOBODY (OOPS!).

        http://w3c.github.io/webappsec/specs/referrer-policy/#referrer-policy-delivery-meta

        defines different keywords than we originally implemented. We should

        support them.

        This patch is a port of Blink's https://codereview.chromium.org/607433002/

        Tests: http/tests/security/referrer-policy-conflicting-policies.html

               http/tests/security/referrer-policy-https-no-referrer-when-downgrade.html

               http/tests/security/referrer-policy-https-no-referrer.html

               http/tests/security/referrer-policy-https-unsafe-url.html

               http/tests/security/referrer-policy-no-referrer-when-downgrade.html

               http/tests/security/referrer-policy-no-referrer.html

        * dom/Document.cpp:

        (WebCore::Document::processReferrerPolicy):

2014-10-11  Carlos Garcia Campos  <cgarcia@igalia.com>

        [GLIB] Split GMainLoopSource moving thread safe implementation to its own class GThreadSafeMainLoopSource

Source/WebCore/dom/Document.cpp

@@void Document::processReferrerPolicy(const String& policy)

{

    ASSERT(!policy.isNull());

    if (equalIgnoringCase(policy, "never"))

        m_referrerPolicy = ReferrerPolicyNever;

    else if (equalIgnoringCase(policy, "always"))

        m_referrerPolicy = ReferrerPolicyAlways;

    if (equalIgnoringCase(policy, "no-referrer") || equalIgnoringCase(policy, "never"))

        setReferrerPolicy(ReferrerPolicyNever);

    else if (equalIgnoringCase(policy, "unsafe-url") || equalIgnoringCase(policy, "always"))

        setReferrerPolicy(ReferrerPolicyAlways);

30493049 else if (equalIgnoringCase(policy, "origin"))

        m_referrerPolicy = ReferrerPolicyOrigin;

    else if (equalIgnoringCase(policy, "default"))

        m_referrerPolicy = ReferrerPolicyDefault;

        setReferrerPolicy(ReferrerPolicyOrigin);

    else if (equalIgnoringCase(policy, "no-referrer-when-downgrade") || equalIgnoringCase(policy, "default"))

        setReferrerPolicy(ReferrerPolicyDefault);

30533053 else {

3054 addConsoleMessage(MessageSource::Rendering, MessageLevel::Error, "Failed to set referrer policy: The value '" + policy + "' is not one of '~~always', 'default', 'n~~ever', or 'origin'. Defaulting to 'never'.");

3055 ~~m_r~~eferrerPolicy = ReferrerPolicyNever;

3054 addConsoleMessage(MessageSource::Rendering, MessageLevel::Error, "Failed to set referrer policy: The value '" + policy + "' is not one of 'no-referrer', 'origin', 'no-referrer-when-downgrade', or 'unsafe-url'. Defaulting to 'no-referrer'.");

3055 setReferrerPolicy(ReferrerPolicyNever);

    }

}

LayoutTests/ChangeLog

2014-10-11  Mike West  <mkwst@chromium.org>

        Referrer Policy: Update <meta name="referrer"> values to match the spec

        https://bugs.webkit.org/show_bug.cgi?id=137635

        Reviewed by NOBODY (OOPS!).

        * http/tests/security/referrer-policy-https-no-referrer-expected.txt: Added.

        * http/tests/security/referrer-policy-https-no-referrer-when-downgrade-expected.txt: Added.

        * http/tests/security/referrer-policy-https-no-referrer-when-downgrade.html: Added.

        * http/tests/security/referrer-policy-https-no-referrer.html: Added.

        * http/tests/security/referrer-policy-https-unsafe-url-expected.txt: Added.

        * http/tests/security/referrer-policy-https-unsafe-url.html: Added.

        * http/tests/security/referrer-policy-invalid-expected.txt: Update the error message with new keywords.

        * http/tests/security/referrer-policy-no-referrer-expected.txt: Added.

        * http/tests/security/referrer-policy-no-referrer-when-downgrade-expected.txt: Added.

        * http/tests/security/referrer-policy-no-referrer-when-downgrade.html: Added.

        * http/tests/security/referrer-policy-no-referrer.html: Added.

2014-10-10  Simon Fraser  <simon.fraser@apple.com>

        Make these animation tests not timeout if hit testing fails.

LayoutTests/http/tests/security/referrer-policy-https-no-referrer-expected.txt

This test checks the default referrer policy when navigating from a secure URL to an insecure URL. The test passes if the printed referrer is empty.

--------

Frame: '<!--framePath //<!--frame0-->-->'

--------

HTTP Referer header is empty

Referrer is empty

LayoutTests/http/tests/security/referrer-policy-https-no-referrer-when-downgrade-expected.txt

This test checks the default referrer policy when navigating from a secure URL to an insecure URL. The test passes if the printed referrer is empty.

--------

Frame: '<!--framePath //<!--frame0-->-->'

--------

HTTP Referer header is empty

Referrer is empty

LayoutTests/http/tests/security/referrer-policy-https-no-referrer-when-downgrade.html

<html>

<head>

<script>

if (window.testRunner) {

    testRunner.dumpAsText();

    testRunner.dumpChildFramesAsText();

    testRunner.waitUntilDone();

}

</script>

</head>

<body>

<p>

This test checks the default referrer policy when navigating from a secure URL

to an insecure URL. The test passes if the printed referrer is empty.

</p>

<iframe src="https://127.0.0.1:8443/security/resources/referrer-policy-start.html?no-referrer-when-downgrade"></iframe>

</body>

</html>

LayoutTests/http/tests/security/referrer-policy-https-no-referrer.html

<html>

<head>

<script>

if (window.testRunner) {

    testRunner.dumpAsText();

    testRunner.dumpChildFramesAsText();

    testRunner.waitUntilDone();

}

</script>

</head>

<body>

<p>

This test checks the default referrer policy when navigating from a secure URL

to an insecure URL. The test passes if the printed referrer is empty.

</p>

<iframe src="https://127.0.0.1:8443/security/resources/referrer-policy-start.html?no-referrer"></iframe>

</body>

</html>

LayoutTests/http/tests/security/referrer-policy-https-unsafe-url-expected.txt

This test checks the always referrer policy when navigating from a secure URL to an insecure URL. The test passes if the printed referrer is https://127.0.0.1:8443/security/resources/referrer-policy-start.html?unsafe-url

--------

Frame: '<!--framePath //<!--frame0-->-->'

--------

HTTP Referer header is https://127.0.0.1:8443/security/resources/referrer-policy-start.html?unsafe-url

Referrer is https://127.0.0.1:8443/security/resources/referrer-policy-start.html?unsafe-url

LayoutTests/http/tests/security/referrer-policy-https-unsafe-url.html

<html>

<head>

<script>

if (window.testRunner) {

    testRunner.dumpAsText();

    testRunner.dumpChildFramesAsText();

    testRunner.waitUntilDone();

}

</script>

</head>

<body>

<p>

This test checks the always referrer policy when navigating from a secure URL

to an insecure URL. The test passes if the printed referrer is

https://127.0.0.1:8443/security/resources/referrer-policy-start.html?unsafe-url

</p>

<iframe src="https://127.0.0.1:8443/security/resources/referrer-policy-start.html?unsafe-url"></iframe>

</body>

</html>

LayoutTests/http/tests/security/referrer-policy-invalid-expected.txt

1 CONSOLE MESSAGE: Failed to set referrer policy: The value 'invalid' is not one of '~~always', 'default', 'n~~ever', or 'origin'. Defaulting to 'never'.

1CONSOLE MESSAGE: Failed to set referrer policy: The value 'invalid' is not one of 'no-referrer', 'origin', 'no-referrer-when-downgrade', or 'unsafe-url'. Defaulting to 'no-referrer'.

This test checks an invalid referrer policy when navigating from an insecure URL to another insecure URL. The test passes if the printed referrer is empty.

LayoutTests/http/tests/security/referrer-policy-no-referrer-expected.txt

This test checks the never referrer policy when navigating from an insecure URL to another insecure URL. The test passes if the printed referrer is empty.

--------

Frame: '<!--framePath //<!--frame0-->-->'

--------

HTTP Referer header is empty

Referrer is empty

LayoutTests/http/tests/security/referrer-policy-no-referrer-when-downgrade-expected.txt

This test checks the default referrer policy when navigating from an insecure URL to another insecure URL. The test passes if the printed referrer is http://127.0.0.1:8000/security/resources/referrer-policy-start.html?no-referrer-when-downgrade

--------

Frame: '<!--framePath //<!--frame0-->-->'

--------

HTTP Referer header is http://127.0.0.1:8000/security/resources/referrer-policy-start.html?no-referrer-when-downgrade

Referrer is http://127.0.0.1:8000/security/resources/referrer-policy-start.html?no-referrer-when-downgrade

LayoutTests/http/tests/security/referrer-policy-no-referrer-when-downgrade.html

<html>

<head>

<script>

if (window.testRunner) {

    testRunner.dumpAsText();

    testRunner.dumpChildFramesAsText();

    testRunner.waitUntilDone();

}

</script>

</head>

<body>

<p>

This test checks the default referrer policy when navigating from an insecure

URL to another insecure URL. The test passes if the printed referrer is

http://127.0.0.1:8000/security/resources/referrer-policy-start.html?no-referrer-when-downgrade

</p>

<iframe src="http://127.0.0.1:8000/security/resources/referrer-policy-start.html?no-referrer-when-downgrade"></iframe>

</body>

</html>

LayoutTests/http/tests/security/referrer-policy-no-referrer.html

<html>

<head>

<script>

if (window.testRunner) {

    testRunner.dumpAsText();

    testRunner.dumpChildFramesAsText();

    testRunner.waitUntilDone();

}

</script>

</head>

<body>

<p>

This test checks the never referrer policy when navigating from an insecure

URL to another insecure URL. The test passes if the printed referrer is empty.

</p>

<iframe src="http://127.0.0.1:8000/security/resources/referrer-policy-start.html?no-referrer"></iframe>

</body>

</html>