@ai-ecoverse/slicc-browsers 1.23.0 → 1.24.0

package/README.md

@@ -195,7 +195,7 @@ For stock Playwright, Puppeteer and raw CDP clients, a guard that declares `stoc
 - `Page.addScriptToEvaluateOnNewDocument` whose `source` matches `^(?:[ \t\n]|//[^\n\r\u2028\u2029]*)*$` on the whole string without the multiline flag (no code), with any `worldName` or `runImmediately`, and its removal;
 - exactly `Emulation.setFocusEmulationEnabled`, `setEmulatedMedia`, `setDeviceMetricsOverride` and `setTouchEmulationEnabled`;
 - `Page.createIsolatedWorld` on a frame the guard already classifies as ordinary: strip `grantUniveralAccess` and `contentSecurityPolicy`, return no `executionContextId` for any other frame; `Runtime.addBinding` scoped to such a world by a non-empty `executionContextName` or its `executionContextId`, with `Runtime.bindingCalled` only from those worlds;
-- `Target.setAutoAttach`: either narrow the filter to tab targets or hide per target; no protected-origin page, iframe or worker (dedicated, shared or service) may reach the client; pages under the tab are held like pages (same URL redaction in `targetInfo`); a transport that synthesizes it declares `syntheticAutoAttach`.
+- `Target.setAutoAttach`: either narrow the filter to tab targets or hide per target; no protected-origin page, iframe (including ordinary-URL children of a protected parent) or worker may reach the client; pages under the tab are held like pages (same URL redaction in `targetInfo`); a transport that synthesizes it declares `syntheticAutoAttach`.
 
 The strip holds whether or not a given Chrome lets that world reach another origin. Code init scripts, main-world bindings and other overrides stay refused or harmless. Admitted display overrides and no-code init scripts must not remain in effect on a protected document — refuse that navigation, or clear them before it runs. Undeclared, they skip, never pass.
 
@@ -223,7 +223,7 @@ await fixture.close();
 You supply:
 - **a guarded client** per row: your guard's CDP connection, with `send(method, params, sessionId)`, `waitEvent(predicate, ms)` and an `events` array;
 - **an unguarded observer**: a direct CDP connection to the same browser, which runs the controls and checks liveness;
-- **origins**: the fixture server reachable as seven, the vault and an ordinary site. Point the protected hostnames at it with Chrome's `--host-resolver-rules`, so tests never touch the real seven;
+- **origins**: the fixture server reachable as seven, the vault, an ordinary site, and for some rows a cross-site ordinary `{cross}` (e.g. `cross.test`). Point those hostnames at it with Chrome's `--host-resolver-rules`, so tests never touch the real seven;
 - **capabilities**: what your transport can do. A row that needs something you don't declare is skipped as `not-supported:<capability>`.
 
 | capability | means the transport can |

package/fixture-server.mjs

@@ -101,6 +101,25 @@ function route(req, url, send, html, redirects) {
         `<script>navigator.sendBeacon(${JSON.stringify(pre)})</script><iframe src="${escape(to)}"></iframe>`
       );
     },
+    '/oopif-nest': () => {
+      const mid = p.get('mid') ?? 'about:blank';
+      return html(
+        'oopif-nest',
+        `<p>oopif-nest ${escape(p.get('n') ?? '')}</p><iframe src="${escape(mid)}"></iframe>`
+      );
+    },
+    '/oopif-mid': () => {
+      const inner = p.get('inner') ?? 'about:blank';
+      return html(
+        'oopif-mid',
+        `<p>oopif-mid ${escape(p.get('n') ?? '')}</p><iframe src="${escape(inner)}"></iframe>`
+      );
+    },
+    '/oopif-srcdoc': () =>
+      html(
+        'oopif-srcdoc',
+        `<p>oopif-srcdoc ${escape(p.get('n') ?? '')}</p><iframe sandbox="allow-scripts allow-forms" srcdoc="${escape('<!doctype html><title>srcdoc</title><p>ordinary srcdoc</p>')}"></iframe>`
+      ),
     '/bfcache': () => {
       const marker = JSON.stringify(`bfcache-marker-${p.get('n') ?? ''}`).replaceAll(
         '<',

package/guard-runner.mjs

@@ -32,6 +32,7 @@ import {
 } from './guard-driver.mjs';
 import { createObserverTarget, discoveryViolation } from './observer-target.mjs';
 import { protectedErrorPage } from './protected-error-page.mjs';
+import { protectedParentIframes } from './protected-parent-iframes.mjs';
 import {
   leftoverPersistentWorker,
   persistentWorkerTypes,
@@ -901,6 +902,7 @@ class Execution {
       'unparseable',
       'errorPage',
       'closeProtectedShape',
+      'protectedParentIframes',
       'extensionWorld',
       'extensionFrame',
       'frameRead',
@@ -912,6 +914,7 @@ class Execution {
       [
         'errorPage',
         'closeProtectedShape',
+        'protectedParentIframes',
         'redirectSecret',
         'extensionFrame',
         'frameRead',
@@ -1016,6 +1019,7 @@ class Execution {
       step.redirectSecret ||
       step.errorPage ||
       step.closeProtectedShape ||
+      step.protectedParentIframes ||
       step.spawnWorker ||
       step.probeSessions
     )
@@ -1163,6 +1167,7 @@ class Execution {
   stepProbe(step, session) {
     if (step.redirectSecret || step.errorPage) return this.originProbe(step, session);
     if (step.closeProtectedShape) return this.runCloseProtectedShape(step);
+    if (step.protectedParentIframes) return this.runProtectedParentIframes(step);
     if (step.spawnWorker) return this.spawnWorker(step);
     return this.probeSessions(step);
   }
@@ -1228,6 +1233,27 @@ class Execution {
     );
   }
 
+  async runProtectedParentIframes(step) {
+    const out = await outcome(
+      protectedParentIframes({
+        client: this.client,
+        reader: this.reader,
+        protectedOrigin: this.vars.target,
+        cross: this.options.targets?.cross,
+        ordinary: this.vars.ordinary,
+        mode: step.protectedParentIframes,
+        tag: this.vars.tag,
+        internalSessions: this.internalSessions,
+        notes: this.notes,
+        budget: this.bound(5000),
+        discovery: supported(['discovery'], this.options.capabilities),
+        eventStart: this.eventStart,
+      })
+    );
+    if (out.ok && out.result?.pageId) this.targets.push(out.result.pageId);
+    return out;
+  }
+
   spawnWorkerKind() {
     return allSteps([...(this.vector.setup ?? []), ...(this.vector.trigger ?? [])]).find(
       (step) => step.spawnWorker
@@ -2214,10 +2240,15 @@ const observerRequired = (check) => {
   return check?.not ? observerRequired(check.not) : false;
 };
 const needsObserver = (vector) =>
-  vector.control.via === 'unguarded' ||
   allSteps([...(vector.setup ?? []), ...(vector.trigger ?? [])]).some(
-    (step) => step.isolatedWorld || step.observer || step.spawnWorker || step.closeProtectedShape
+    (step) =>
+      step.isolatedWorld ||
+      step.observer ||
+      step.spawnWorker ||
+      step.closeProtectedShape ||
+      step.protectedParentIframes
   ) ||
+  vector.control.via === 'unguarded' ||
   observerRequired(vector.liveCheck) ||
   Object.values(vector.observe ?? {}).some(
     (observation) => observerRequired(observation.check) || observerRequired(observation.eitherWhen)

package/guard-vectors.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "setVersion": "1.23.0",
+  "setVersion": "1.24.0",
   "sources": [
     {
       "repo": "ai-ecoverse/slicc-cli",
@@ -31562,6 +31562,207 @@
         "workerReachable": false
       },
       "designDependent": ["attachRefused", "workerAttached"]
+    },
+
+    {
+      "id": "C3.protected-parent-iframes",
+      "family": "C",
+      "kind": "cdp",
+      "scope": "any",
+      "setup": [
+        {
+          "text": "a protected page frames a cross-site ordinary iframe that frames a further ordinary iframe; the guarded client must not list, discover, or attach to either ordinary iframe target"
+        },
+        {
+          "page": "tab",
+          "url": "{ordinary}/blank"
+        }
+      ],
+      "trigger": [
+        {
+          "protectedParentIframes": "nested-cross",
+          "as": "probe",
+          "requires": ["browserSession"]
+        }
+      ],
+      "targets": ["seven", "vault"],
+      "requires": ["browserSession"],
+      "observe": {
+        "iframeListed": {
+          "means": "C3.protected-parent-iframes: Target.getTargets through the client shows an ordinary iframe under the protected parent by id, URL, or parentId chain",
+          "check": {
+            "result": "probe",
+            "path": "result.iframeListed",
+            "equals": true,
+            "observer": "client"
+          },
+          "absencePoll": true
+        },
+        "infoRead": {
+          "means": "C3.protected-parent-iframes: Target.getTargetInfo through the client returns either ordinary iframe under the protected parent",
+          "check": {
+            "result": "probe",
+            "path": "result.infoRead",
+            "equals": true,
+            "observer": "client"
+          },
+          "absencePoll": true
+        },
+        "eventsSeen": {
+          "means": "C3.protected-parent-iframes: a discovery event carries either ordinary iframe under the protected parent",
+          "requires": ["discovery"],
+          "check": {
+            "result": "probe",
+            "path": "result.eventsSeen",
+            "equals": true,
+            "observer": "client"
+          },
+          "absencePoll": true
+        },
+        "attachSession": {
+          "means": "C3.protected-parent-iframes: Target.attachToTarget on a raw ordinary iframe id returned a session",
+          "check": {
+            "result": "probe",
+            "path": "result.attachSession",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "attachRefused": {
+          "means": "C3.protected-parent-iframes: Target.attachToTarget on a raw ordinary iframe id was refused",
+          "check": {
+            "result": "probe",
+            "path": "result.attachRefused",
+            "equals": true,
+            "observer": "client"
+          }
+        }
+      },
+      "live": "the unguarded reader opened the protected host page",
+      "liveCheck": {
+        "result": "probe",
+        "path": "result.live",
+        "equals": true,
+        "observer": "client"
+      },
+      "control": {
+        "origin": "ordinary",
+        "via": "unguarded",
+        "expected": {
+          "iframeListed": true,
+          "infoRead": true,
+          "eventsSeen": true,
+          "attachSession": true,
+          "attachRefused": false
+        }
+      },
+      "expected": {
+        "iframeListed": false,
+        "infoRead": false,
+        "eventsSeen": false,
+        "attachSession": false,
+        "attachRefused": true
+      }
+    },
+    {
+      "id": "C3.protected-parent-srcdoc",
+      "family": "C",
+      "kind": "cdp",
+      "scope": "any",
+      "setup": [
+        {
+          "text": "a seven page frames a sandboxed srcdoc iframe without allow-same-origin; when Chrome gives it its own target the guarded client must hide it, otherwise the row is incomplete with that evidence"
+        },
+        {
+          "page": "tab",
+          "url": "{ordinary}/blank"
+        }
+      ],
+      "trigger": [
+        {
+          "protectedParentIframes": "sandboxed-srcdoc",
+          "as": "probe",
+          "requires": ["browserSession"]
+        }
+      ],
+      "targets": ["seven"],
+      "requires": ["browserSession"],
+      "observe": {
+        "iframeListed": {
+          "means": "C3.protected-parent-srcdoc: Target.getTargets through the client shows the sandboxed srcdoc iframe under seven by id, URL, or parentId chain",
+          "check": {
+            "result": "probe",
+            "path": "result.iframeListed",
+            "equals": true,
+            "observer": "client"
+          },
+          "absencePoll": true
+        },
+        "infoRead": {
+          "means": "C3.protected-parent-srcdoc: Target.getTargetInfo through the client returns the sandboxed srcdoc iframe under seven",
+          "check": {
+            "result": "probe",
+            "path": "result.infoRead",
+            "equals": true,
+            "observer": "client"
+          },
+          "absencePoll": true
+        },
+        "eventsSeen": {
+          "means": "C3.protected-parent-srcdoc: a discovery event carries the sandboxed srcdoc iframe under seven",
+          "requires": ["discovery"],
+          "check": {
+            "result": "probe",
+            "path": "result.eventsSeen",
+            "equals": true,
+            "observer": "client"
+          },
+          "absencePoll": true
+        },
+        "attachSession": {
+          "means": "C3.protected-parent-srcdoc: Target.attachToTarget on the raw srcdoc iframe id returned a session",
+          "check": {
+            "result": "probe",
+            "path": "result.attachSession",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "attachRefused": {
+          "means": "C3.protected-parent-srcdoc: Target.attachToTarget on the raw srcdoc iframe id was refused",
+          "check": {
+            "result": "probe",
+            "path": "result.attachRefused",
+            "equals": true,
+            "observer": "client"
+          }
+        }
+      },
+      "live": "the unguarded reader opened the protected host page",
+      "liveCheck": {
+        "result": "probe",
+        "path": "result.live",
+        "equals": true,
+        "observer": "client"
+      },
+      "control": {
+        "origin": "ordinary",
+        "via": "unguarded",
+        "expected": {
+          "iframeListed": true,
+          "infoRead": true,
+          "eventsSeen": true,
+          "attachSession": true,
+          "attachRefused": false
+        }
+      },
+      "expected": {
+        "iframeListed": false,
+        "infoRead": false,
+        "eventsSeen": false,
+        "attachSession": false,
+        "attachRefused": true
+      }
     }
   ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-browsers",
-  "version": "1.23.0",
+  "version": "1.24.0",
   "description": "SLICC's shared browser catalog, JSON schemas and discovery conformance corpus",
   "type": "module",
   "license": "Apache-2.0",
@@ -67,6 +67,7 @@
     "bfcache-restore.mjs",
     "close-protected-shape.mjs",
     "protected-worker.mjs",
+    "protected-parent-iframes.mjs",
     "fixture-client.mjs"
   ],
   "scripts": {
@@ -75,7 +76,7 @@
     "validate": "node scripts/validate.mjs",
     "lint": "slicc-lint && test -z \"$(gofmt -l .)\" && go mod tidy -diff && go vet ./... && GOOS=darwin go vet ./... && GOOS=windows go vet ./... && golangci-lint run && cargo fmt --check && cargo clippy --all-features --all-targets -- -D warnings && cargo check --target wasm32-wasip1 --no-default-features && cargo check --target wasm32-wasip1 --features serde && cargo check --target wasm32-wasip1 --all-features",
     "format": "biome check --write . && gofmt -w . && cargo fmt",
-    "test": "export PATH=\"$HOME/.cargo/bin:$PATH\" && node --test --test-concurrency=1 test/integration/debugger-stage1-packaging.test.mjs test/integration/debugger-raw-control.test.mjs test/integration/debugger-cleanup.test.mjs test/integration/debugger-stage1-install-vectors.test.mjs test/integration/protected-premise.test.mjs test/integration/debugger-stage1-vectors.test.mjs test/integration/self-contained.test.mjs test/integration/seven-corpus.test.mjs test/integration/browser-runner.test.mjs test/integration/fixture-client.test.mjs test/integration/guard-redirect-carrier.test.mjs test/integration/guard-redirect-session-end.test.mjs test/integration/guard-redirect-history.test.mjs test/integration/guard-redirect-iframe.test.mjs test/integration/guard-incomplete.test.mjs test/integration/guard-unparseable-wipe.test.mjs test/integration/guard-browser-ui.test.mjs test/integration/guard-snapshot-settle.test.mjs test/integration/guard-stall.test.mjs test/integration/guard-forged.test.mjs test/integration/guard-trusted-emulation.test.mjs test/integration/guard-exit-steps.test.mjs test/integration/guard-exit-refusal.test.mjs test/integration/guard-frame-read.test.mjs test/integration/guard-bfcache.test.mjs test/integration/guard-bfcache-marker.test.mjs test/integration/guard-bfcache-history.test.mjs test/integration/guard-bfcache-review.test.mjs test/integration/guard-bfcache-quarantine.test.mjs test/integration/guard-error-page-navigation.test.mjs test/integration/guard-error-page-events.test.mjs test/integration/guard-error-page-reload.test.mjs test/integration/guard-close-protected.test.mjs test/integration/guard-close-protected-shapes.test.mjs test/integration/guard-close-protected-shapes-chrome.test.mjs test/integration/guard-world-paint.test.mjs test/integration/gates.test.mjs test/integration/validate.test.mjs test/integration/validate-guard-stock-setup.test.mjs test/integration/go.test.mjs test/integration/cargo.test.mjs test/integration/workflows.test.mjs test/integration/guard-refusable-nav.test.mjs test/integration/guard-protected-worker.test.mjs test/integration/guard-protected-worker-chrome-narrow.test.mjs test/integration/guard-protected-worker-chrome-hide.test.mjs test/integration/guard-protected-worker-chrome-hide-cut.test.mjs test/integration/guard-protected-worker-chrome-admit.test.mjs test/integration/guard-protected-worker-chrome-late.test.mjs test/integration/guard-protected-worker-chrome-rewrite.test.mjs test/integration/guard-protected-worker-chrome-rewrite-late.test.mjs test/integration/guard-sweep-union.test.mjs && node --test --test-concurrency=2 test/integration/guard-lifecycle.test.mjs test/integration/chromium-launch.test.mjs test/integration/guard-fit.test.mjs test/integration/guard-chain.test.mjs test/integration/guard-validation.test.mjs test/integration/guard-liveness.test.mjs test/integration/guard-observations.test.mjs test/integration/guard-child-latency.test.mjs test/integration/guard-adoption.test.mjs test/integration/guard-scoping.test.mjs test/integration/guard-late-pause.test.mjs test/integration/guard-legs.test.mjs test/integration/guard-fetch-enable.test.mjs test/integration/guard-diagnostics.test.mjs test/integration/guard-chrome.test.mjs test/integration/guard-worlds.test.mjs test/integration/guard-world-discovery.test.mjs test/integration/guard-world-guesses.test.mjs test/integration/guard-unparseable.test.mjs test/integration/guard-redirect-secret.test.mjs test/integration/guard-error-page.test.mjs test/integration/guard-discovery.test.mjs test/integration/guard-bfcache-chrome.test.mjs test/integration/guard-browser-page.test.mjs test/integration/guard-scales.test.mjs test/integration/guard-shared-log.test.mjs test/integration/guard-pre-beacon.test.mjs test/integration/guard-world-pause.test.mjs test/integration/guard-reveal-overlap.test.mjs test/integration/guard-extension-frame-mouse.test.mjs test/integration/guard-extension-frames.test.mjs test/integration/guard-stock-setup.test.mjs test/integration/guard-stock-attack.test.mjs test/integration/guard-parallel.test.mjs test/integration/guard-client-exit.test.mjs test/integration/guard-runner.test.mjs test/integration/guard-sweep-ordinary.test.mjs test/integration/guard-sweep-seven.test.mjs test/integration/guard-sweep-vault.test.mjs test/integration/guard-sweep-vault-x.test.mjs test/integration/guard-sweep-apex.test.mjs test/integration/guard-sweep-others.test.mjs",
+    "test": "export PATH=\"$HOME/.cargo/bin:$PATH\" && node --test --test-concurrency=1 test/integration/debugger-stage1-packaging.test.mjs test/integration/debugger-raw-control.test.mjs test/integration/debugger-cleanup.test.mjs test/integration/debugger-stage1-install-vectors.test.mjs test/integration/protected-premise.test.mjs test/integration/debugger-stage1-vectors.test.mjs test/integration/self-contained.test.mjs test/integration/seven-corpus.test.mjs test/integration/browser-runner.test.mjs test/integration/fixture-client.test.mjs test/integration/guard-redirect-carrier.test.mjs test/integration/guard-redirect-session-end.test.mjs test/integration/guard-redirect-history.test.mjs test/integration/guard-redirect-iframe.test.mjs test/integration/guard-incomplete.test.mjs test/integration/guard-unparseable-wipe.test.mjs test/integration/guard-browser-ui.test.mjs test/integration/guard-snapshot-settle.test.mjs test/integration/guard-stall.test.mjs test/integration/guard-forged.test.mjs test/integration/guard-trusted-emulation.test.mjs test/integration/guard-exit-steps.test.mjs test/integration/guard-exit-refusal.test.mjs test/integration/guard-frame-read.test.mjs test/integration/guard-bfcache.test.mjs test/integration/guard-bfcache-marker.test.mjs test/integration/guard-bfcache-history.test.mjs test/integration/guard-bfcache-review.test.mjs test/integration/guard-bfcache-quarantine.test.mjs test/integration/guard-error-page-navigation.test.mjs test/integration/guard-error-page-events.test.mjs test/integration/guard-error-page-reload.test.mjs test/integration/guard-close-protected.test.mjs test/integration/guard-close-protected-shapes.test.mjs test/integration/guard-close-protected-shapes-chrome.test.mjs test/integration/guard-protected-parent-iframes.test.mjs test/integration/guard-protected-parent-iframes-chrome.test.mjs test/integration/guard-world-paint.test.mjs test/integration/gates.test.mjs test/integration/validate.test.mjs test/integration/validate-guard-stock-setup.test.mjs test/integration/go.test.mjs test/integration/cargo.test.mjs test/integration/workflows.test.mjs test/integration/guard-refusable-nav.test.mjs test/integration/guard-protected-worker.test.mjs test/integration/guard-protected-worker-chrome-narrow.test.mjs test/integration/guard-protected-worker-chrome-hide.test.mjs test/integration/guard-protected-worker-chrome-hide-cut.test.mjs test/integration/guard-protected-worker-chrome-admit.test.mjs test/integration/guard-protected-worker-chrome-late.test.mjs test/integration/guard-protected-worker-chrome-rewrite.test.mjs test/integration/guard-protected-worker-chrome-rewrite-late.test.mjs test/integration/guard-sweep-union.test.mjs && node --test --test-concurrency=2 test/integration/guard-lifecycle.test.mjs test/integration/chromium-launch.test.mjs test/integration/guard-fit.test.mjs test/integration/guard-chain.test.mjs test/integration/guard-validation.test.mjs test/integration/guard-liveness.test.mjs test/integration/guard-observations.test.mjs test/integration/guard-child-latency.test.mjs test/integration/guard-adoption.test.mjs test/integration/guard-scoping.test.mjs test/integration/guard-late-pause.test.mjs test/integration/guard-legs.test.mjs test/integration/guard-fetch-enable.test.mjs test/integration/guard-diagnostics.test.mjs test/integration/guard-chrome.test.mjs test/integration/guard-worlds.test.mjs test/integration/guard-world-discovery.test.mjs test/integration/guard-world-guesses.test.mjs test/integration/guard-unparseable.test.mjs test/integration/guard-redirect-secret.test.mjs test/integration/guard-error-page.test.mjs test/integration/guard-discovery.test.mjs test/integration/guard-bfcache-chrome.test.mjs test/integration/guard-browser-page.test.mjs test/integration/guard-scales.test.mjs test/integration/guard-shared-log.test.mjs test/integration/guard-pre-beacon.test.mjs test/integration/guard-world-pause.test.mjs test/integration/guard-reveal-overlap.test.mjs test/integration/guard-extension-frame-mouse.test.mjs test/integration/guard-extension-frames.test.mjs test/integration/guard-stock-setup.test.mjs test/integration/guard-stock-attack.test.mjs test/integration/guard-parallel.test.mjs test/integration/guard-client-exit.test.mjs test/integration/guard-runner.test.mjs test/integration/guard-sweep-ordinary.test.mjs test/integration/guard-sweep-seven.test.mjs test/integration/guard-sweep-vault.test.mjs test/integration/guard-sweep-vault-x.test.mjs test/integration/guard-sweep-apex.test.mjs test/integration/guard-sweep-others.test.mjs",
     "test:unit": "mkdir -p coverage/unit && node --experimental-test-coverage --test --test-concurrency=1 --test-reporter=lcov --test-reporter-destination=coverage/unit/lcov.info test/unit/*.test.mjs && go test -race -cover ./...",
     "build": "go build ./... && cargo build --all-features && cargo build --target wasm32-wasip1 --all-features && npm pack --dry-run",
     "prepublishOnly": "node scripts/set-crate-version.mjs \"$npm_package_version\"",
@@ -83,10 +84,10 @@
     "trust:dry": "npx fledgling sync --dry-run -y --skip-publish",
     "release": "semantic-release",
     "test:unit:redirect": "mkdir -p coverage/unit && node --experimental-test-coverage --test --test-concurrency=1 --test-coverage-include=redirect-secret.mjs --test-coverage-include=redirect-fragments.mjs --test-reporter=lcov --test-reporter-destination=coverage/unit/redirect.lcov test/unit/guard-redirect-*.test.mjs && slicc-diff-cover coverage/unit/redirect.lcov",
-    "test:unit:guard": "mkdir -p coverage/unit && node --experimental-vm-modules --no-warnings --experimental-test-coverage --test --test-concurrency=1 --test-coverage-include=guard-runner.mjs --test-coverage-include=guard-driver.mjs --test-coverage-include=extension-frame.mjs --test-coverage-include=fixture-server.mjs --test-coverage-include=fixture-client.mjs --test-coverage-include=observer-target.mjs --test-coverage-include=frame-read.mjs --test-coverage-include=bfcache-restore.mjs --test-coverage-include=protected-error-page.mjs --test-coverage-include=unparseable-url.mjs --test-coverage-include=scripts/browser-runner.mjs --test-coverage-include=scripts/validate.mjs --test-reporter=lcov --test-reporter-destination=coverage/unit/guard.lcov test/unit/guard-*.test.mjs && slicc-diff-cover coverage/unit/guard.lcov"
+    "test:unit:guard": "mkdir -p coverage/unit && node --experimental-vm-modules --no-warnings --experimental-test-coverage --test --test-concurrency=1 --test-coverage-include=guard-runner.mjs --test-coverage-include=guard-driver.mjs --test-coverage-include=extension-frame.mjs --test-coverage-include=fixture-server.mjs --test-coverage-include=fixture-client.mjs --test-coverage-include=observer-target.mjs --test-coverage-include=frame-read.mjs --test-coverage-include=bfcache-restore.mjs --test-coverage-include=protected-error-page.mjs --test-coverage-include=protected-parent-iframes.mjs --test-coverage-include=unparseable-url.mjs --test-coverage-include=scripts/browser-runner.mjs --test-coverage-include=scripts/validate.mjs --test-reporter=lcov --test-reporter-destination=coverage/unit/guard.lcov test/unit/guard-*.test.mjs && slicc-diff-cover coverage/unit/guard.lcov"
   },
   "devDependencies": {
-    "@ai-ecoverse/slicc-cdp": "1.48.7",
+    "@ai-ecoverse/slicc-cdp": "1.48.10",
     "@ai-ecoverse/slicc-shared-web": "2.14.2",
     "@biomejs/biome": "2.6.5",
     "ajv": "8.20.0",

package/protected-parent-iframes.mjs

@@ -0,0 +1,567 @@
+import { outcome, waitFor } from './guard-driver.mjs';
+import { createObserverTarget } from './observer-target.mjs';
+
+const pause = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+
+const refused = (out) => {
+  if (out.ok) return false;
+  const message = String(out.error?.message ?? out.error ?? '');
+  if (/^slicc: refused:/.test(message)) return true;
+  if (
+    /timed out|timeout|ECONN|ENOTFOUND|EPIPE|socket hang up|fetch failed|no answer/i.test(message)
+  )
+    return false;
+  return /Protocol error|Invalid parameters|No target with given id|No session with given id|Session with given id not found|Target closed|not found|Cannot find context/i.test(
+    message
+  );
+};
+
+function answered(out) {
+  if (!out) return false;
+  if (out.ok) return true;
+  const err = out.error;
+  if (err && typeof err.code === 'number') return true;
+  return /^slicc: refused:/.test(String(err?.message ?? err ?? ''));
+}
+
+async function until(check, ms, step = 25) {
+  const deadline = Date.now() + ms;
+  for (;;) {
+    const value = await check();
+    if (value) return value;
+    if (Date.now() > deadline) return null;
+    await pause(step);
+  }
+}
+
+function note(notes, label, evidence) {
+  notes.push(`${label}: ${JSON.stringify(evidence)}`);
+}
+
+function walkFrames(tree, out = []) {
+  if (!tree?.frame) return out;
+  out.push(tree.frame);
+  for (const child of tree.childFrames ?? []) walkFrames(child, out);
+  return out;
+}
+
+function byIdMap(infos) {
+  return new Map((infos ?? []).map((info) => [info.targetId, info]));
+}
+
+function ancestorsOf(info, byId) {
+  const chain = [];
+  let cur = info;
+  const seen = new Set();
+  while (cur) {
+    if (seen.has(cur.targetId)) break;
+    seen.add(cur.targetId);
+    chain.push(cur);
+    if (!cur.parentId) break;
+    cur = byId.get(cur.parentId);
+  }
+  return chain;
+}
+
+function underProtected(info, byId, pageId) {
+  if (!info || info.targetId === pageId) return false;
+  return ancestorsOf(info, byId)
+    .slice(1)
+    .some((ancestor) => ancestor.targetId === pageId);
+}
+
+function collectIframes(infos, pageId) {
+  const byId = byIdMap(infos);
+  return (infos ?? []).filter(
+    (info) => info.type === 'iframe' && info.targetId && underProtected(info, byId, pageId)
+  );
+}
+
+function matchLeak(info, rawIds, rawUrls, pageId, rawParentIds) {
+  if (!info) return false;
+  if (rawIds.has(info.targetId)) return true;
+  if (typeof info.url === 'string' && info.url.length > 0 && rawUrls.has(info.url)) return true;
+  if (info.parentId && (info.parentId === pageId || rawParentIds.has(info.parentId))) return true;
+  return false;
+}
+
+function leakFromList(infos, rawIds, rawUrls, pageId, rawParentIds) {
+  return (infos ?? []).some((info) => matchLeak(info, rawIds, rawUrls, pageId, rawParentIds));
+}
+
+function leakFromEvents(events, rawIds, rawUrls, pageId, rawParentIds, from = 0) {
+  return (events ?? []).slice(from).some((event) => {
+    if (
+      ['Target.targetCreated', 'Target.targetInfoChanged', 'Target.attachedToTarget'].includes(
+        event.method
+      )
+    )
+      return matchLeak(event.params?.targetInfo, rawIds, rawUrls, pageId, rawParentIds);
+    if (event.method === 'Target.targetDestroyed') return rawIds.has(event.params?.targetId);
+    return false;
+  });
+}
+
+async function openProtected(reader, url, notes, internalSessions) {
+  const created = await outcome(
+    createObserverTarget(reader, { url }, notes).then(async (result) => {
+      const { sessionId } = await reader.send('Target.attachToTarget', {
+        targetId: result.targetId,
+        flatten: true,
+      });
+      await reader.send('Page.enable', {}, sessionId);
+      await reader.send('Runtime.enable', {}, sessionId);
+      return { targetId: result.targetId, sessionId };
+    })
+  );
+  if (!created.ok) return created;
+  internalSessions.add(created.result.sessionId);
+  const ready = await waitFor(async () => {
+    const read = await outcome(
+      reader.send(
+        'Runtime.evaluate',
+        { expression: 'document.readyState', returnByValue: true },
+        created.result.sessionId
+      )
+    );
+    return read.ok && ['interactive', 'complete'].includes(read.result?.result?.value);
+  }, 4000);
+  note(notes, 'protected-parent.open', {
+    targetId: created.result.targetId,
+    url,
+    ready: Boolean(ready),
+  });
+  if (!ready)
+    return {
+      ok: true,
+      result: { incomplete: 'protected page did not become ready', ...created.result },
+    };
+  return created;
+}
+
+async function readTree(reader, sessionId) {
+  const tree = await outcome(reader.send('Page.getFrameTree', {}, sessionId));
+  if (!tree.ok) return null;
+  return tree.result?.frameTree ?? null;
+}
+
+async function waitRawIframes(reader, pageId, budget, notes, want = 2) {
+  const found = await until(async () => {
+    const listed = await outcome(reader.send('Target.getTargets', {}));
+    if (!listed.ok) return null;
+    const iframes = collectIframes(listed.result?.targetInfos ?? [], pageId);
+    if (iframes.length >= want) return { infos: listed.result.targetInfos, iframes };
+    return null;
+  }, budget);
+  if (found) {
+    note(notes, 'protected-parent.raw-iframes', {
+      count: found.iframes.length,
+      iframes: found.iframes.map((info) => ({
+        targetId: info.targetId,
+        url: info.url,
+        parentId: info.parentId,
+        type: info.type,
+      })),
+    });
+    return found;
+  }
+  const listed = await outcome(reader.send('Target.getTargets', {}));
+  note(notes, 'protected-parent.raw-iframes-missing', {
+    want,
+    listed: (listed.result?.targetInfos ?? [])
+      .filter((info) => info.type === 'iframe' || info.targetId === pageId)
+      .map((info) => ({
+        targetId: info.targetId,
+        type: info.type,
+        url: info.url,
+        parentId: info.parentId,
+      })),
+  });
+  return null;
+}
+
+async function measureList(client, rawIds, rawUrls, pageId, rawParentIds) {
+  const listed = await outcome(client.send('Target.getTargets', {}));
+  if (!answered(listed)) return { out: listed, unanswered: true, leak: false };
+  return {
+    out: listed,
+    unanswered: false,
+    leak: listed.ok
+      ? leakFromList(listed.result?.targetInfos ?? [], rawIds, rawUrls, pageId, rawParentIds)
+      : false,
+  };
+}
+
+async function measureInfo(client, rawIds, rawUrls, pageId, rawParentIds) {
+  let out;
+  let leak = false;
+  let unanswered = false;
+  let unansweredId;
+  for (const targetId of rawIds) {
+    const info = await outcome(client.send('Target.getTargetInfo', { targetId }));
+    out ??= info;
+    if (!answered(info)) {
+      unanswered = true;
+      unansweredId ??= targetId;
+      continue;
+    }
+    if (!info.ok) continue;
+    const targetInfo = info.result?.targetInfo;
+    if (matchLeak(targetInfo, rawIds, rawUrls, pageId, rawParentIds)) leak = true;
+  }
+  return { out, leak, unanswered, unansweredId };
+}
+
+async function measureAttach(client, rawIds) {
+  let out;
+  let attachSession = false;
+  let attachRefused = false;
+  let unanswered = false;
+  let unansweredId;
+  for (const targetId of rawIds) {
+    const attached = await outcome(
+      client.send('Target.attachToTarget', { targetId, flatten: true })
+    );
+    out ??= attached;
+    if (!answered(attached)) {
+      unanswered = true;
+      unansweredId ??= targetId;
+      continue;
+    }
+    if (attached.ok && attached.result?.sessionId) {
+      attachSession = true;
+      attachRefused = false;
+      await outcome(
+        client.send('Target.detachFromTarget', { sessionId: attached.result.sessionId })
+      );
+      continue;
+    }
+    if (refused(attached)) attachRefused = true;
+  }
+  return { out, attachSession, attachRefused, unanswered, unansweredId };
+}
+
+function takeFirst(slot, sample, apply) {
+  if (!slot.out) slot.out = sample.out;
+  slot.unanswered ||= sample.unanswered;
+  slot.unansweredId ??= sample.unansweredId;
+  apply(sample);
+}
+
+function settleArm(result, key, unanswered, label, missing, fallback) {
+  if (unanswered) missing.push(label);
+  else if (result[key] === undefined) Object.assign(result, fallback);
+}
+
+async function measureClient({
+  client,
+  rawIds,
+  rawUrls,
+  pageId,
+  rawParentIds,
+  discovery,
+  eventStart,
+  budget,
+  notes,
+}) {
+  const result = {};
+  const missing = [];
+  const windowMs = Math.min(budget, 1500);
+  const deadline = Date.now() + windowMs;
+  const list = { out: undefined, unanswered: false };
+  const info = { out: undefined, unanswered: false };
+  const attach = { out: undefined, unanswered: false };
+  let firstEvents = false;
+  while (Date.now() <= deadline) {
+    const listed = await measureList(client, rawIds, rawUrls, pageId, rawParentIds);
+    takeFirst(list, listed, (sample) => {
+      if (sample.leak) result.iframeListed = true;
+      else if (!sample.unanswered) result.iframeListed ??= false;
+    });
+    const informed = await measureInfo(client, rawIds, rawUrls, pageId, rawParentIds);
+    takeFirst(info, informed, (sample) => {
+      if (sample.leak) result.infoRead = true;
+      else if (!sample.unanswered) result.infoRead ??= false;
+    });
+    if (
+      discovery &&
+      leakFromEvents(client.events ?? [], rawIds, rawUrls, pageId, rawParentIds, eventStart)
+    ) {
+      result.eventsSeen = true;
+      firstEvents = true;
+    }
+    if (result.attachSession !== true) {
+      const attached = await measureAttach(client, rawIds);
+      takeFirst(attach, attached, (sample) => {
+        if (sample.attachSession) {
+          result.attachSession = true;
+          result.attachRefused = false;
+        } else if (!sample.unanswered) {
+          result.attachSession = sample.attachSession;
+          result.attachRefused = sample.attachRefused;
+        }
+      });
+    }
+    if (
+      result.iframeListed === true &&
+      result.infoRead === true &&
+      (!discovery || result.eventsSeen === true) &&
+      result.attachSession === true
+    )
+      break;
+    await pause(50);
+  }
+  if (discovery && result.eventsSeen === undefined) result.eventsSeen = false;
+  settleArm(result, 'iframeListed', list.unanswered, 'Target.getTargets unanswered', missing, {
+    iframeListed: false,
+  });
+  settleArm(
+    result,
+    'infoRead',
+    info.unanswered,
+    info.unansweredId
+      ? `Target.getTargetInfo unanswered (${info.unansweredId})`
+      : 'Target.getTargetInfo unanswered',
+    missing,
+    { infoRead: false }
+  );
+  settleArm(
+    result,
+    'attachSession',
+    attach.unanswered,
+    attach.unansweredId
+      ? `Target.attachToTarget unanswered (${attach.unansweredId})`
+      : 'Target.attachToTarget unanswered',
+    missing,
+    { attachSession: false, attachRefused: false }
+  );
+  note(notes, 'protected-parent.client', {
+    iframeListed: result.iframeListed ?? 'unmeasured',
+    infoRead: result.infoRead ?? 'unmeasured',
+    eventsSeen: discovery ? (result.eventsSeen ?? false) : 'not-declared',
+    attachSession: result.attachSession ?? 'unmeasured',
+    attachRefused: result.attachRefused ?? 'unmeasured',
+    windowMs,
+    firstListOk: list.out?.ok,
+    firstInfoOk: info.out?.ok,
+    firstAttachOk: attach.out?.ok,
+    firstEvents,
+    unanswered: missing,
+  });
+  return missing.length ? { ...result, incomplete: missing.join('; ') } : result;
+}
+
+async function nestedCross({
+  reader,
+  client,
+  protectedOrigin,
+  cross,
+  ordinary,
+  tag,
+  notes,
+  budget,
+  discovery,
+  internalSessions,
+  eventStart,
+}) {
+  if (!cross) return { incomplete: 'no cross-site ordinary origin ({cross}) mapped' };
+  const mid = `${cross}/oopif-mid?inner=${encodeURIComponent(`${ordinary}/doc?n=inner-${tag}`)}&n=mid-${tag}`;
+  const page = `${protectedOrigin}/oopif-nest?mid=${encodeURIComponent(mid)}&n=host-${tag}`;
+  note(notes, 'protected-parent.nest-urls', {
+    host: protectedOrigin,
+    mid: cross,
+    inner: ordinary,
+    crossMapping:
+      '{cross} must be a different registrable domain from {ordinary} (e.g. cross.test); same-site {cross} leaves nested iframe targets missing and this row incomplete',
+  });
+  const opened = await openProtected(reader, page, notes, internalSessions);
+  if (!opened.ok)
+    return {
+      incomplete: `observer setup failed: ${opened.error?.message ?? opened.error}`,
+    };
+  if (opened.result.incomplete) return { live: false, incomplete: opened.result.incomplete };
+  const { targetId: pageId, sessionId } = opened.result;
+  await until(
+    async () => {
+      const tree = await readTree(reader, sessionId);
+      return walkFrames(tree).length >= 3 ? tree : null;
+    },
+    Math.min(budget, 2000)
+  );
+  const tree = await readTree(reader, sessionId);
+  note(notes, 'protected-parent.frame-tree', {
+    frames: walkFrames(tree).map((frame) => ({ id: frame.id, url: frame.url })),
+  });
+  const raw = await waitRawIframes(reader, pageId, budget, notes, 2);
+  if (!raw) {
+    const late = await readTree(reader, sessionId);
+    note(notes, 'protected-parent.frame-tree-late', {
+      frames: walkFrames(late).map((frame) => ({ id: frame.id, url: frame.url })),
+    });
+    return {
+      live: true,
+      incomplete: 'nested ordinary iframe targets did not appear in the raw leg within the budget',
+      pageId,
+    };
+  }
+  const rawIds = new Set(raw.iframes.map((info) => info.targetId));
+  const rawUrls = new Set(
+    raw.iframes.map((info) => info.url).filter((url) => typeof url === 'string' && url.length > 0)
+  );
+  const rawParentIds = new Set(
+    raw.iframes.map((info) => info.parentId).filter((id) => typeof id === 'string' && id.length > 0)
+  );
+  rawParentIds.add(pageId);
+  const measured = await measureClient({
+    client,
+    rawIds,
+    rawUrls,
+    pageId,
+    rawParentIds,
+    discovery,
+    eventStart,
+    budget,
+    notes,
+  });
+  return {
+    live: true,
+    pageId,
+    iframeIds: [...rawIds],
+    iframeUrls: [...rawUrls],
+    ...measured,
+  };
+}
+
+async function sandboxedSrcdoc({
+  reader,
+  client,
+  protectedOrigin,
+  tag,
+  notes,
+  budget,
+  discovery,
+  internalSessions,
+  eventStart,
+}) {
+  const page = `${protectedOrigin}/oopif-srcdoc?n=srcdoc-${tag}`;
+  const opened = await openProtected(reader, page, notes, internalSessions);
+  if (!opened.ok)
+    return {
+      incomplete: `observer setup failed: ${opened.error?.message ?? opened.error}`,
+    };
+  if (opened.result.incomplete) return { live: false, incomplete: opened.result.incomplete };
+  const { targetId: pageId, sessionId } = opened.result;
+  const tree = await readTree(reader, sessionId);
+  const frames = walkFrames(tree);
+  const srcdocFrame =
+    frames.find((frame) => frame.url === 'about:srcdoc') ??
+    frames.find((frame) => typeof frame.url === 'string' && frame.url.includes('srcdoc')) ??
+    frames.find((frame) => frame.id && frame.id !== (tree?.frame?.id ?? pageId));
+  note(notes, 'protected-parent.srcdoc-tree', {
+    frames: frames.map((frame) => ({ id: frame.id, url: frame.url })),
+    srcdocFrame: srcdocFrame ? { id: srcdocFrame.id, url: srcdocFrame.url } : null,
+  });
+  const raw = await waitRawIframes(reader, pageId, budget, notes, 1);
+  if (!raw) {
+    const reason = 'sandboxed srcdoc frame has no own target in this Chrome';
+    note(notes, 'protected-parent.srcdoc-no-oopif', {
+      reason,
+      pageId,
+      frameTreeHasChild: Boolean(srcdocFrame),
+      childUrl: srcdocFrame?.url ?? null,
+    });
+    notes.push('srcdoc: no own target in this Chrome (incomplete)');
+    return {
+      live: true,
+      incomplete: reason,
+      pageId,
+    };
+  }
+  const rawIds = new Set(raw.iframes.map((info) => info.targetId));
+  const rawUrls = new Set(
+    raw.iframes.map((info) => info.url).filter((url) => typeof url === 'string' && url.length > 0)
+  );
+  const rawParentIds = new Set(
+    raw.iframes.map((info) => info.parentId).filter((id) => typeof id === 'string' && id.length > 0)
+  );
+  rawParentIds.add(pageId);
+  note(notes, 'protected-parent.srcdoc-oopif', {
+    count: raw.iframes.length,
+    iframes: raw.iframes.map((info) => ({
+      targetId: info.targetId,
+      url: info.url,
+      parentId: info.parentId,
+    })),
+  });
+  notes.push('srcdoc: own iframe target, hidden');
+  const measured = await measureClient({
+    client,
+    rawIds,
+    rawUrls,
+    pageId,
+    rawParentIds,
+    discovery,
+    eventStart,
+    budget,
+    notes,
+  });
+  return {
+    live: true,
+    pageId,
+    iframeIds: [...rawIds],
+    iframeUrls: [...rawUrls],
+    ...measured,
+  };
+}
+
+export async function protectedParentIframes({
+  client,
+  reader,
+  protectedOrigin,
+  cross,
+  ordinary,
+  mode,
+  tag,
+  internalSessions = new Set(),
+  notes = [],
+  budget = 5000,
+  discovery = false,
+  eventStart = 0,
+}) {
+  if (!reader) return { incomplete: 'missing unguarded reader' };
+  if (discovery) {
+    await outcome(client.send('Target.setDiscoverTargets', { discover: true }));
+    await outcome(reader.send('Target.setDiscoverTargets', { discover: true }));
+    notes.push('protected-parent.discovery: setDiscoverTargets discover=true');
+  }
+  const built =
+    mode === 'nested-cross'
+      ? await nestedCross({
+          reader,
+          client,
+          protectedOrigin,
+          cross,
+          ordinary,
+          tag,
+          notes,
+          budget,
+          discovery,
+          internalSessions,
+          eventStart,
+        })
+      : mode === 'sandboxed-srcdoc'
+        ? await sandboxedSrcdoc({
+            reader,
+            client,
+            protectedOrigin,
+            tag,
+            notes,
+            budget,
+            discovery,
+            internalSessions,
+            eventStart,
+          })
+        : { incomplete: `unknown protectedParentIframes mode ${mode}` };
+  if (built.pageId) await outcome(reader.send('Target.closeTarget', { targetId: built.pageId }));
+  return built;
+}

package/schema/guard-vectors.schema.json

@@ -564,6 +564,22 @@
             }
           }
         },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["protectedParentIframes", "as"],
+          "properties": {
+            "protectedParentIframes": {
+              "enum": ["nested-cross", "sandboxed-srcdoc"]
+            },
+            "as": {
+              "$ref": "#/$defs/name"
+            },
+            "requires": {
+              "$ref": "#/$defs/requires"
+            }
+          }
+        },
         {
           "type": "object",
           "additionalProperties": false,