Add sanbdoxed_pages to allow extension/app pages to be served in a sandboxed, unique origin

chrome/common/extensions/manifest_tests/extension_manifests_sandboxed_unittest.cc

+// Copyright (c) 2012 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "chrome/common/extensions/manifest_tests/extension_manifest_test.h"
+
+#include "chrome/common/extensions/extension_manifest_constants.h"
+#include "testing/gtest/include/gtest/gtest.h"
+
+using extensions::Extension;
+
+namespace errors = extension_manifest_errors;
+
+TEST_F(ExtensionManifestTest, SandboxedPages) {
+  // Sandboxed pages specified, no custom CSP value.
+  scoped_refptr<Extension> extension1(
+      LoadAndExpectSuccess("sandboxed_pages_valid_1.json"));
+
+  // No sandboxed pages.
+  scoped_refptr<Extension> extension2(
+      LoadAndExpectSuccess("sandboxed_pages_valid_2.json"));
+
+  // Sandboxed pages specified with a custom CSP value.
+  scoped_refptr<Extension> extension3(
+      LoadAndExpectSuccess("sandboxed_pages_valid_3.json"));
+
+  const char kSandboxedCSP[] = "sandbox allow-scripts allow-forms";
+  const char kDefaultCSP[] =
+      "script-src 'self' chrome-extension-resource:; object-src 'self'";
+  const char kCustomSandboxedCSP[] =
+      "sandbox; script-src: https://www.google.com";
+
+  EXPECT_EQ(kSandboxedCSP,
+      extension1->GetResourceContentSecurityPolicy("/test"));
+  EXPECT_EQ(kDefaultCSP, extension1->GetResourceContentSecurityPolicy("/none"));
+  EXPECT_EQ(kDefaultCSP, extension2->GetResourceContentSecurityPolicy("/test"));
+  EXPECT_EQ(kCustomSandboxedCSP,
+      extension3->GetResourceContentSecurityPolicy("/test"));
+  EXPECT_EQ(kDefaultCSP, extension3->GetResourceContentSecurityPolicy("/none"));
+
+  Testcase testcases[] = {
+    Testcase("sandboxed_pages_invalid_1.json",
+        errors::kInvalidSandboxedPagesList),
+    Testcase("sandboxed_pages_invalid_2.json",
+        errors::kInvalidSandboxedPage),
+    Testcase("sandboxed_pages_invalid_3.json",
+        errors::kInvalidSandboxedPagesCSP),
+    Testcase("sandboxed_pages_invalid_4.json",
+        errors::kInvalidSandboxedPagesCSP),
+    Testcase("sandboxed_pages_invalid_5.json",
+        errors::kInvalidSandboxedPagesCSP)
+  };
+  RunTestcases(testcases, arraysize(testcases),
+               EXPECT_TYPE_ERROR);
+}
+
+