<!DOCTYPE html>
<html>
<script src="../../js-test-resources/js-test-pre.js"></script>
<body>
<p id="description"></p>
<div id="console"></div>

<script>
description('Tests that isolated worlds can have XHRs run in a different origin.');

jsTestIsAsync = true;

var tests = [
    function() {
        debug('XHR from main world');
        xhr();
    },
    function() {
        debug('XHR from isolated world with unchanged security origin');
        runTestInWorld(1, 'xhr');
    },
    function() {
        debug('XHR from isolated world with same security origin as XHR target');
        testRunner.setIsolatedWorldSecurityOrigin(1, 'http://localhost:8000');
        runTestInWorld(1, 'xhr');
    },
    function() {
        debug('XHR from isolated world with security origin that is whitelisted for XHR target');
        testRunner.setIsolatedWorldSecurityOrigin(2, 'chrome-extension://123');
        testRunner.addOriginAccessWhitelistEntry('chrome-extension://123', 'http', 'localhost', false);
        runTestInWorld(2, 'xhr');
    },
    function() {
        debug('XHR from main world is not affected by the isolated world origin or whitelist');
        xhr();
    }
];
var currentTest = 0;

// This test is meaningless without testRunner.
if (window.testRunner) {
    window.addEventListener(
        'message',
        function(event) {
            var message = JSON.parse(event.data);
            switch (message.type) {
                case 'test-done':
                    currentTest++;
                    if (currentTest == tests.length) {
                        testRunner.setIsolatedWorldSecurityOrigin(1, null);
                        testRunner.setIsolatedWorldSecurityOrigin(2, null);
                        finishJSTest();
                    }
                    else
                        tests[currentTest]();
                    break;
                case 'debug':
                    debug(message.message);
                    break;
                default:
                    testFailed('Unknown message: ' + event.data);
                    break;
            }
        },
        false);

    tests[0]();
} else {
    testFailed('Test depends on LayoutTestController and must be run by DRT');
}

function runTestInWorld(worldId, funcName)
{
    testRunner.evaluateScriptInIsolatedWorld(
        worldId, String(eval(funcName)) + "\n" + funcName + "();");
}

function xhr()
{
    function debug(message) {
        window.postMessage(JSON.stringify({
                'type': 'debug',
                'message': message
            }),
            '*');
    }

    var xhr = new XMLHttpRequest();
    xhr.open('GET', 'http://localhost:8000/security/isolatedWorld/resources/cross-origin-xhr.txt', true);
    xhr.onreadystatechange = function() {
        if (xhr.readyState != 4)
            return;

        debug('XHR completed with status ' + xhr.status);
        window.postMessage(JSON.stringify({'type': 'test-done'}), '*');
    };
    xhr.send(null);
}

</script>

<script src="../../js-test-resources/js-test-post.js"></script>
</body>
</html>