<!DOCTYPE html>
<html>
<head>
    <script src="../../js-test-resources/js-test-pre.js"></script>
    <meta http-equiv="Content-Security-Policy" content="connect-src 'none'">
</head>
<body>
<p id="description"></p>
<div id="console"></div>

<script>
description('Tests that isolated worlds can have XHRs that the page\'s CSP wouldn\'t allow.');

jsTestIsAsync = true;

const SameOrigin = true;
const CrossOrigin = false;
const Asynchronous = true;
const Synchronous = false;
const ShouldBlock = true;
const ShouldNotBlock = false;

var tests = [
    function() {
        debug('Synchronous XHR same-origin from main world');
        xhr({sameOrigin : true}, Synchronous, ShouldBlock);
    },
    function() {
        debug('Asynchronous XHR same-origin from main world');
        xhr({sameOrigin : true}, Asynchronous, ShouldBlock);
    },
    function() {
        debug('Synchronous XHR same-origin from isolated world');
        invokeInWorld(1, xhr, SameOrigin, Synchronous, ShouldNotBlock);
    },
    function() {
        debug('Asynchronous XHR same-origin from isolated world');
        invokeInWorld(2, xhr, SameOrigin, Asynchronous, ShouldNotBlock);
    },
    function() {
        debug('Synchronous XHR cross-origin from isolated world');
        invokeInWorld(3, xhr, CrossOrigin, Synchronous, ShouldNotBlock);
    },
    function() {
        debug('Asynchronous XHR cross-origin from isolated world');
        invokeInWorld(4, xhr, CrossOrigin, Asynchronous, ShouldNotBlock);
    }
];
var currentTest = 0;

// This test is meaningless without testRunner.
if (window.testRunner) {
    window.addEventListener(
        'message',
        function(event) {
            var message = JSON.parse(event.data);
            switch (message.type) {
                case 'test-done':
                    currentTest++;
                    if (currentTest == tests.length)
                        finishJSTest();
                    else
                        tests[currentTest]();
                    break;
                case 'debug':
                    debug(message.message);
                    break;
                default:
                    testFailed('Unknown message: ' + event.data);
                    break;
            }
        },
        false);

    tests[0]();
} else {
    testFailed('Test depends on LayoutTestController and must be run by DRT');
}

// This function will only successfully pass on JSON-stringifieable arguments such as numbers and strings to aNamedFunction
function invokeInWorld(worldId, aNamedFunction) {
    console.assert(aNamedFunction.name);
    var argumentsToPass = Array.prototype.slice.call(arguments, 2);
    var script = aNamedFunction.toString() + '; ' + aNamedFunction.name + '(' + argumentsToPass.map(JSON.stringify).join(', ') + ');';
    testRunner.evaluateScriptInIsolatedWorld(worldId, script);
}

function xhr(isSameOrigin, isAsync, shouldBlock) {
    function debug(message) {
        window.postMessage(JSON.stringify({
                'type': 'debug',
                'message': message
            }),
            '*');
    }

    var url = (isSameOrigin ? 'http://127.0.0.1:8000/' : 'http://localhost:8000/') + 'xmlhttprequest/resources/access-control-basic-allow.cgi';
    var xhr = new XMLHttpRequest();
    var asyncCallDone = false;
    var finallyClauseDone = false;

    xhr.open('GET', url, isAsync);

    if (isAsync) {
        xhr.addEventListener('load', function() {
            if (shouldBlock)
                debug('FAIL: XHR.send should not have received a load event.');
            else
                debug('PASS: XHR.send received a load event.');

            if (finallyClauseDone)
                window.postMessage(JSON.stringify({'type': 'test-done'}), '*');
            else
                asyncCallDone = true;
        });

        xhr.addEventListener('error', function() {
            if (shouldBlock)
                debug('PASS: XHR.send received an error event.');
            else
                debug('FAIL: XHR.send should not have received an error event.');

            if (finallyClauseDone)
                window.postMessage(JSON.stringify({'type': 'test-done'}), '*');
            else
                asyncCallDone = true;
        });
    }

    try {
        xhr.send();
        if (shouldBlock && !isAsync)
            debug('FAIL: XHR.send should have thrown an exception.');
        else
            debug('PASS: XHR.send did not throw an exception.');
    } catch (e) {
        if (shouldBlock && !isAsync)
            debug('PASS: XHR.send threw an exception.');
        else
            debug('FAIL: XHR.send should not have thrown an exception.');
    } finally {
        if (!isAsync || asyncCallDone)
            window.postMessage(JSON.stringify({'type': 'test-done'}), '*');
        else
            finallyClauseDone = true;
    }
}
</script>
<script src="../../js-test-resources/js-test-post.js"></script>
</body>
</html>