1 files changed, 22 insertions, 0 deletions
diff --git a/tests/wpt/tests/storage-access-api/storage-access-beyond-cookies.BlobURLSharedWorker.sub.https.tentative.window.js b/tests/wpt/tests/storage-access-api/storage-access-beyond-cookies.BlobURLSharedWorker.sub.https.tentative.window.js
new file mode 100644
index 00000000000..f0559984230
--- /dev/null
+++ b/tests/wpt/tests/storage-access-api/storage-access-beyond-cookies.BlobURLSharedWorker.sub.https.tentative.window.js
@@ -0,0 +1,22 @@
+// META: script=/resources/testdriver.js
+// META: script=/resources/testdriver-vendor.js
+
+'use strict';
+
+async_test(t => {
+  // Set up a message listener that simply calls t.done() when a message is received.
+  window.addEventListener("message", t.step_func(e => {
+    if (e.data.type != "result") {
+      return;
+    }
+    assert_equals(e.data.message, "Blob URL SharedWorker tests completed successfully.");
+    t.done();
+  }));
+
+  // Create an iframe that's cross-site with top-frame.
+  const id = Date.now();
+  let iframe = document.createElement("iframe");
+  iframe.src = "https://{{hosts[alt][]}}:{{ports[https][0]}}/storage-access-api/resources/storage-access-beyond-cookies-iframe.sub.html?type=BlobURLSharedWorker&id=" + id;
+  document.body.appendChild(iframe);
+
+}, "Verify a blob URL created via URL.createObjectURL from the third-party context shouldn't be useable as the shared worker script when it's passed to saa_handle.SharedWorker.");