@ai-ecoverse/slicc-browsers 1.22.1 → 1.24.0

package/fixture-server.mjs

@@ -76,6 +76,16 @@ function route(req, url, send, html, redirects) {
         { sourcemap: '/listener.js.map' }
       ),
     '/page': () => html('trigger', trigger(p)),
+    '/blob-nav': () =>
+      html(
+        'blob-nav',
+        `<p>blob-nav ${escape(p.get('n') ?? '')}</p><script>const b=URL.createObjectURL(new Blob(['<!doctype html><title>blob</title><p>blob ${escape(p.get('n') ?? '')}</p>'],{type:'text/html'}));location.replace(b);</script>`
+      ),
+    '/blank': () => html('blank', `<p>blank ${escape(p.get('n') ?? '')}</p>`),
+    '/blank-open': () => html('blank-open', `<p>blank-open ${escape(p.get('n') ?? '')}</p>`),
+    '/os/': () => html('os', `<p>os ${escape(p.get('n') ?? '')}</p>`),
+    '/os/index.html': () => html('os', `<p>os ${escape(p.get('n') ?? '')}</p>`),
+    '/os/callback.html': () => html('os-callback', `<p>callback ${escape(p.get('n') ?? '')}</p>`),
     '/api/cookies': () => send(200, req.headers.cookie ?? 'none', 'text/plain'),
     '/plant': () =>
       html('plant', '<script>localStorage.setItem("canary","planted")</script>', {
@@ -91,6 +101,25 @@ function route(req, url, send, html, redirects) {
         `<script>navigator.sendBeacon(${JSON.stringify(pre)})</script><iframe src="${escape(to)}"></iframe>`
       );
     },
+    '/oopif-nest': () => {
+      const mid = p.get('mid') ?? 'about:blank';
+      return html(
+        'oopif-nest',
+        `<p>oopif-nest ${escape(p.get('n') ?? '')}</p><iframe src="${escape(mid)}"></iframe>`
+      );
+    },
+    '/oopif-mid': () => {
+      const inner = p.get('inner') ?? 'about:blank';
+      return html(
+        'oopif-mid',
+        `<p>oopif-mid ${escape(p.get('n') ?? '')}</p><iframe src="${escape(inner)}"></iframe>`
+      );
+    },
+    '/oopif-srcdoc': () =>
+      html(
+        'oopif-srcdoc',
+        `<p>oopif-srcdoc ${escape(p.get('n') ?? '')}</p><iframe sandbox="allow-scripts allow-forms" srcdoc="${escape('<!doctype html><title>srcdoc</title><p>ordinary srcdoc</p>')}"></iframe>`
+      ),
     '/bfcache': () => {
       const marker = JSON.stringify(`bfcache-marker-${p.get('n') ?? ''}`).replaceAll(
         '<',
@@ -147,10 +176,31 @@ function requestURL(req, scheme) {
   };
 }
 
+async function holdSlow({ req, res, url, p, html, entries, history, slows }) {
+  const n = p.get('n') ?? '';
+  const ms = Math.min(Math.max(Number(p.get('ms') ?? 15000) || 15000, 1), 60000);
+  const entry = {
+    time: Date.now(),
+    url: url.href,
+    method: req.method,
+    headers: { ...req.headers },
+  };
+  entries.push(entry);
+  history.push(entry);
+  await new Promise((resolve) => {
+    const timer = setTimeout(resolve, ms);
+    slows.set(n, { resolve, timer });
+  });
+  slows.delete(n);
+  if (res.writableEnded) return;
+  return html('slow', `<p>slow ${escape(n)}</p>`);
+}
+
 export async function fixtureServer({ host = '127.0.0.1', port = 0, tls, latency } = {}) {
   let entries = [];
   const history = [];
   const redirects = new Map();
+  const slows = new Map();
   const redirectSecret = async ({ path, host = '', search = '', remove, ...value }) => {
     if (
       typeof path !== 'string' ||
@@ -162,6 +212,14 @@ export async function fixtureServer({ host = '127.0.0.1', port = 0, tls, latency
     if (remove) redirects.delete(key);
     else redirects.set(key, value);
   };
+  const releaseSlow = (n) => {
+    const entry = slows.get(String(n ?? ''));
+    if (!entry) return false;
+    clearTimeout(entry.timer);
+    entry.resolve();
+    slows.delete(String(n ?? ''));
+    return true;
+  };
   const scheme = tls ? 'https' : 'http';
   const handler = async (req, res) => {
     const url = requestURL(req, scheme);
@@ -183,6 +241,10 @@ export async function fixtureServer({ host = '127.0.0.1', port = 0, tls, latency
         'text/html',
         headers
       );
+    if (req.method === 'GET' && url.pathname === '/slow') {
+      await holdSlow({ req, res, url, p, html, entries, history, slows });
+      return;
+    }
     if (req.method === 'GET' && url.pathname === '/log') {
       const from = Number(p.get('since') ?? 0);
       if (!Number.isInteger(from) || from < 0 || from > history.length)
@@ -220,6 +282,7 @@ export async function fixtureServer({ host = '127.0.0.1', port = 0, tls, latency
   return {
     redirects,
     redirectSecret,
+    releaseSlow,
     port: address.port,
     origin: `${scheme}://${host}:${address.port}`,
     log: () => structuredClone(entries),
@@ -228,6 +291,7 @@ export async function fixtureServer({ host = '127.0.0.1', port = 0, tls, latency
     },
     close: () =>
       new Promise((resolve, reject) => {
+        for (const n of [...slows.keys()]) releaseSlow(n);
         server.closeAllConnections();
         server.close((error) => (error ? reject(error) : resolve()));
       }),

package/guard-runner.mjs

@@ -3,6 +3,7 @@ import { fixtureClient, prepareFixture } from './fixture-client.mjs';
 export { fixtureClient };
 
 import { bfcacheRestore } from './bfcache-restore.mjs';
+import { closeProtectedShape } from './close-protected-shape.mjs';
 import { extensionFrame } from './extension-frame.mjs';
 import { DEFAULT_EXTENSION_WORLD_ID, extensionWorld } from './extension-world.mjs';
 import { frameRead } from './frame-read.mjs';
@@ -31,6 +32,7 @@ import {
 } from './guard-driver.mjs';
 import { createObserverTarget, discoveryViolation } from './observer-target.mjs';
 import { protectedErrorPage } from './protected-error-page.mjs';
+import { protectedParentIframes } from './protected-parent-iframes.mjs';
 import {
   leftoverPersistentWorker,
   persistentWorkerTypes,
@@ -194,6 +196,7 @@ class Execution {
     this.unsupported = undefined;
     this.preSent = [];
     this.notes = [];
+    this.sharedNotes = Array.isArray(options.notes) ? options.notes : undefined;
     this.answers = [];
     this.internalSessions = new Set();
     this.attachSettings = new Map();
@@ -222,6 +225,10 @@ class Execution {
   note(message) {
     if (this.notes.length >= 80) this.notes.shift();
     Array.prototype.push.call(this.notes, message);
+    if (this.sharedNotes && this.sharedNotes !== this.notes) {
+      if (this.sharedNotes.length >= 80) this.sharedNotes.shift();
+      Array.prototype.push.call(this.sharedNotes, message);
+    }
   }
 
   installClientTrace() {
@@ -894,6 +901,8 @@ class Execution {
       'redirectSecret',
       'unparseable',
       'errorPage',
+      'closeProtectedShape',
+      'protectedParentIframes',
       'extensionWorld',
       'extensionFrame',
       'frameRead',
@@ -902,9 +911,15 @@ class Execution {
     if (probe && !out.ok) this.errors.push(`${probe}: ${out.error?.message ?? 'probe failed'}`);
     if (step.client && !out.ok) this.errors.push(`client exit: ${out.error.message}`);
     if (
-      ['errorPage', 'redirectSecret', 'extensionFrame', 'frameRead', 'bfcacheRestore'].includes(
-        probe
-      ) &&
+      [
+        'errorPage',
+        'closeProtectedShape',
+        'protectedParentIframes',
+        'redirectSecret',
+        'extensionFrame',
+        'frameRead',
+        'bfcacheRestore',
+      ].includes(probe) &&
       out.ok &&
       out.result?.incomplete
     )
@@ -1000,9 +1015,15 @@ class Execution {
       return;
     }
     if (step.client) return outcome(this.exit());
-    if (step.redirectSecret || step.errorPage) return this.originProbe(step, session);
-    if (step.spawnWorker) return this.spawnWorker(step);
-    if (step.probeSessions) return this.probeSessions(step);
+    if (
+      step.redirectSecret ||
+      step.errorPage ||
+      step.closeProtectedShape ||
+      step.protectedParentIframes ||
+      step.spawnWorker ||
+      step.probeSessions
+    )
+      return this.stepProbe(step, session);
     if (step.bfcacheRestore)
       return outcome(
         bfcacheRestore({
@@ -1143,6 +1164,14 @@ class Execution {
     }
   }
 
+  stepProbe(step, session) {
+    if (step.redirectSecret || step.errorPage) return this.originProbe(step, session);
+    if (step.closeProtectedShape) return this.runCloseProtectedShape(step);
+    if (step.protectedParentIframes) return this.runProtectedParentIframes(step);
+    if (step.spawnWorker) return this.spawnWorker(step);
+    return this.probeSessions(step);
+  }
+
   async originProbe(step, session) {
     if (step.redirectSecret) {
       this.internalSessions.add(session);
@@ -1187,6 +1216,44 @@ class Execution {
     );
   }
 
+  runCloseProtectedShape(step) {
+    return outcome(
+      closeProtectedShape({
+        client: this.client,
+        reader: this.reader,
+        ordinary: this.vars.ordinary,
+        protectedOrigin: this.vars.target,
+        shape: step.closeProtectedShape,
+        tag: this.vars.tag,
+        internalSessions: this.internalSessions,
+        notes: this.notes,
+        budget: this.bound(5000),
+        releaseSlow: this.options.fixture.releaseSlow,
+      })
+    );
+  }
+
+  async runProtectedParentIframes(step) {
+    const out = await outcome(
+      protectedParentIframes({
+        client: this.client,
+        reader: this.reader,
+        protectedOrigin: this.vars.target,
+        cross: this.options.targets?.cross,
+        ordinary: this.vars.ordinary,
+        mode: step.protectedParentIframes,
+        tag: this.vars.tag,
+        internalSessions: this.internalSessions,
+        notes: this.notes,
+        budget: this.bound(5000),
+        discovery: supported(['discovery'], this.options.capabilities),
+        eventStart: this.eventStart,
+      })
+    );
+    if (out.ok && out.result?.pageId) this.targets.push(out.result.pageId);
+    return out;
+  }
+
   spawnWorkerKind() {
     return allSteps([...(this.vector.setup ?? []), ...(this.vector.trigger ?? [])]).find(
       (step) => step.spawnWorker
@@ -2173,10 +2240,15 @@ const observerRequired = (check) => {
   return check?.not ? observerRequired(check.not) : false;
 };
 const needsObserver = (vector) =>
-  vector.control.via === 'unguarded' ||
   allSteps([...(vector.setup ?? []), ...(vector.trigger ?? [])]).some(
-    (step) => step.isolatedWorld || step.observer || step.spawnWorker
+    (step) =>
+      step.isolatedWorld ||
+      step.observer ||
+      step.spawnWorker ||
+      step.closeProtectedShape ||
+      step.protectedParentIframes
   ) ||
+  vector.control.via === 'unguarded' ||
   observerRequired(vector.liveCheck) ||
   Object.values(vector.observe ?? {}).some(
     (observation) => observerRequired(observation.check) || observerRequired(observation.eitherWhen)