payment-disabled.php | Explore in Territory

<?php
// Copyright 2016 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

// This test ensures that payment feature when disabled may not be called by
// any iframe even when allowpaymentrequest is set.

Header("Feature-Policy: payment 'none'");
?>

<!DOCTYPE html>
<script src="../../resources/testharness.js"></script>
<script src="../../resources/testharnessreport.js"></script>
<script src="resources/helper.js"></script>
<iframe></iframe>
<iframe allowpaymentrequest></iframe>
<script>
var srcs = [
  "resources/feature-policy-payment.html",
  "http://localhost:8000/feature-policy/resources/feature-policy-payment.html"
];

function loadFrame(iframe, src) {
  var allowpaymentrequest = iframe.hasAttribute('allowpaymentrequest');
  promise_test(function() {
    iframe.src = src;
    return new Promise(function(resolve, reject) {
      window.addEventListener('message', function(e) {
        resolve(e.data);
      }, { once: true });
    }).then(function(data) {
      assert_false(data.enabled, 'Paymentrequest():');
      assert_equals(data.name, 'SecurityError', 'Exception Name:');
      assert_equals(data.message, "Failed to construct 'PaymentRequest': " +
        "Must be in a top-level browsing context or an iframe needs to " +
        "specify allow=\"payment\" explicitly", 'Error Message:');
    });
  }, 'Paymentrequest disabled on URL: ' + src + ' with allowpaymentrequest = ' +
    allowpaymentrequest);
}

window.onload = function() {
  loadIframes(srcs);
}
</script>
chromium/third_party/blink/web_tests/http/tests/feature-policy/payment-disabled.php
