From 2c599da4f5cdbe121d0c2cc9fb5fd37e166a942e Mon Sep 17 00:00:00 2001
From: Domenic Denicola <d@domenic.me>
Date: Sat, 12 Nov 2022 10:09:54 +0000
Subject: [PATCH] Bug 1797937 [wpt PR 36709] - Test that javascript:
 URL-created documents use the initiator as referrer, a=testonly

Automatic update from web-platform-tests
Test that javascript: URL-created documents carry over referrer

Follows https://github.com/whatwg/html/pull/6315.
--

wpt-commits: 5ad834e4a682b4b4acd5428be83254318b81ad0f
wpt-pr: 36709
---
 .../javascript-url-referrer.window.js         | 38 +++++++++++++++++++
 1 file changed, 38 insertions(+)
 create mode 100644 testing/web-platform/tests/html/browsers/browsing-the-web/navigating-across-documents/javascript-url-referrer.window.js

diff --git a/testing/web-platform/tests/html/browsers/browsing-the-web/navigating-across-documents/javascript-url-referrer.window.js b/testing/web-platform/tests/html/browsers/browsing-the-web/navigating-across-documents/javascript-url-referrer.window.js
new file mode 100644
index 0000000000000..1f11429c9e1ce
--- /dev/null
+++ b/testing/web-platform/tests/html/browsers/browsing-the-web/navigating-across-documents/javascript-url-referrer.window.js
@@ -0,0 +1,38 @@
+// META: script=../resources/helpers.js
+// META: title=javascript: URL navigation to a string must create a document whose referrer is the navigation initiator
+
+const originalURL = location.href;
+
+const testCases = [
+  ["unsafe-url", location.href],
+  ["origin", self.origin + "/"],
+  ["no-referrer", ""]
+];
+
+for (const [referrerPolicyForStartingWindowCreation, expectedReferrer] of testCases) {
+  promise_test(async (t) => {
+    const meta = document.createElement("meta");
+    meta.name = "referrer";
+    meta.content = referrerPolicyForStartingWindowCreation;
+    t.add_cleanup(() => meta.remove());
+    document.head.append(meta);
+
+    const w = await openWindow("/common/blank.html", t);
+    const originalReferrer = w.document.referrer;
+    assert_equals(originalReferrer, expectedReferrer,
+      "Sanity check: opened window's referrer is set correctly");
+
+    // Mess with the current document's URL so that the initiator URL is different. Then, if that
+    // shows up as the javascript: URL document's referrer, we know the navigation initiator's URL is
+    // being used as the referrer, which is incorrect.
+    history.replaceState(undefined, "", "/incorrect-referrer.html");
+    t.add_cleanup(() => history.replaceState(undefined, "", originalURL));
+
+    w.location.href = `javascript:'a string<script>opener.postMessage(document.referrer, "*");</script>'`;
+
+    const referrer = await waitForMessage(w);
+
+    assert_equals(referrer, originalReferrer,
+      "javascript: URL-created document's referrer equals the previous document's referrer");
+  }, `${referrerPolicyForStartingWindowCreation} referrer policy used to create the starting page`);
+}