Add test for LocalContentCanAccessRemoteUrls setting

Change-Id: Ia360553626c0277c7ef703504c8a7a76ca792801
Reviewed-by: Michael Brüning <[email protected]>

Author: Kirill Burtsev

tests/auto/widgets/origins/origins.pro

@@ -1,4 +1,5 @@
 include(../tests.pri)
+include(../../shared/http.pri)
 CONFIG += c++14
 qtConfig(webengine-webchannel):qtHaveModule(websockets) {
     QT += websockets

tests/auto/widgets/origins/tst_origins.cpp

@@ -27,6 +27,7 @@
 ****************************************************************************/
 
 #include "../util.h"
+#include "httpserver.h"
 
 #include <QtCore/qfile.h>
 #include <QtTest/QtTest>
@@ -215,6 +216,8 @@ private Q_SLOTS:
     void jsUrlOrigin();
     void subdirWithAccess();
     void subdirWithoutAccess();
+    void fileAccessRemoteUrl_data();
+    void fileAccessRemoteUrl();
     void mixedSchemes();
     void mixedSchemesWithCsp();
     void mixedXHR_data();
@@ -497,6 +500,31 @@ void tst_Origins::subdirWithoutAccess()
     QCOMPARE(eval(QSL("msg[1]")), QVariant(QSL("world")));
 }
 
+void tst_Origins::fileAccessRemoteUrl_data()
+{
+    QTest::addColumn<bool>("EnableAccess");
+    QTest::addRow("enabled") << true;
+    QTest::addRow("disabled") << false;
+}
+
+void tst_Origins::fileAccessRemoteUrl()
+{
+    QFETCH(bool, EnableAccess);
+
+    HttpServer server;
+    server.setResourceDirs({ THIS_DIR "resources" });
+    QVERIFY(server.start());
+
+    ScopedAttribute sa(m_page->settings(), QWebEngineSettings::LocalContentCanAccessRemoteUrls, EnableAccess);
+    if (!EnableAccess)
+        QTest::ignoreMessage(QtSystemMsg, QRegularExpression(QSL("blocked by CORS policy")));
+
+    QVERIFY(verifyLoad(QSL("file:" THIS_DIR "resources/mixedXHR.html")));
+
+    eval("sendXHR('" + server.url("/mixedXHR.txt").toString() + "')");
+    QTRY_COMPARE(eval("result"), (EnableAccess ? QString("ok") : QString("error")));
+}
+
 // Load the main page over one scheme with an iframe over another scheme.
 //
 // For file and qrc schemes, the iframe should load but it should not be