1 files changed, 86 insertions, 0 deletions
diff --git a/chromium/chrome/renderer/extensions/renderer_permissions_policy_delegate_unittest.cc b/chromium/chrome/renderer/extensions/renderer_permissions_policy_delegate_unittest.cc
new file mode 100644
index 00000000000..b4b71253a3e
--- /dev/null
+++ b/chromium/chrome/renderer/extensions/renderer_permissions_policy_delegate_unittest.cc
@@ -0,0 +1,86 @@
+// Copyright 2013 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "chrome/renderer/extensions/renderer_permissions_policy_delegate.h"
+
+#include <memory>
+#include <utility>
+
+#include "base/command_line.h"
+#include "chrome/common/extensions/extension_constants.h"
+#include "chrome/renderer/extensions/chrome_extensions_dispatcher_delegate.h"
+#include "content/public/test/mock_render_process_host.h"
+#include "content/public/test/mock_render_thread.h"
+#include "extensions/common/constants.h"
+#include "extensions/common/extension.h"
+#include "extensions/common/extension_builder.h"
+#include "extensions/common/permissions/permissions_data.h"
+#include "extensions/renderer/dispatcher.h"
+#include "extensions/renderer/test_extensions_renderer_client.h"
+#include "testing/gtest/include/gtest/gtest.h"
+
+namespace extensions {
+
+namespace {
+
+class RendererPermissionsPolicyDelegateTest : public testing::Test {
+ public:
+  RendererPermissionsPolicyDelegateTest() {
+  }
+
+  void SetUp() override {
+    testing::Test::SetUp();
+    render_thread_.reset(new content::MockRenderThread());
+    renderer_client_.reset(new TestExtensionsRendererClient);
+    ExtensionsRendererClient::Set(renderer_client_.get());
+    extension_dispatcher_ = std::make_unique<Dispatcher>(
+        std::make_unique<ChromeExtensionsDispatcherDelegate>());
+    policy_delegate_.reset(
+        new RendererPermissionsPolicyDelegate(extension_dispatcher_.get()));
+  }
+
+ protected:
+  std::unique_ptr<content::MockRenderThread> render_thread_;
+  std::unique_ptr<ExtensionsRendererClient> renderer_client_;
+  std::unique_ptr<Dispatcher> extension_dispatcher_;
+  std::unique_ptr<RendererPermissionsPolicyDelegate> policy_delegate_;
+};
+
+scoped_refptr<const Extension> CreateTestExtension(const std::string& id) {
+  return ExtensionBuilder()
+      .SetManifest(
+          DictionaryBuilder()
+              .Set("name", "Extension with ID " + id)
+              .Set("version", "1.0")
+              .Set("manifest_version", 2)
+              .Set("permissions", ListBuilder().Append("<all_urls>").Build())
+              .Build())
+      .SetID(id)
+      .Build();
+}
+
+}  // namespace
+
+// Tests that CanAccessPage returns false for the any process
+// which hosts the webstore.
+TEST_F(RendererPermissionsPolicyDelegateTest, CannotScriptWebstore) {
+  GURL kAnyUrl("http://example.com/");
+  scoped_refptr<const Extension> extension(CreateTestExtension("a"));
+  std::string error;
+
+  EXPECT_TRUE(extension->permissions_data()->CanAccessPage(kAnyUrl, -1, &error))
+      << error;
+
+  // Pretend we are in the webstore process. We should not be able to execute
+  // script.
+  scoped_refptr<const Extension> webstore_extension(
+      CreateTestExtension(extensions::kWebStoreAppId));
+  RendererExtensionRegistry::Get()->Insert(webstore_extension.get());
+  extension_dispatcher_->OnActivateExtension(extensions::kWebStoreAppId);
+  EXPECT_FALSE(
+      extension->permissions_data()->CanAccessPage(kAnyUrl, -1, &error))
+      << error;
+}
+
+}  // namespace extensions