[Clipboard] Prevent crash with disengaged unsanitized argument

shwetabin · chromium-wpt-export-bot · commit 7d21e1126711 · 2025-09-18T02:45:22.000-07:00
Adding a has_value check on the unsanitized vector to verify whether it is set to a disengaged state. Bug: 443201222 Change-Id: Ibb5fcc1888ff948327f61cd7d48fe7a9f93e33c7 Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6928781 Commit-Queue: Shweta Bindal <shwetabindal@microsoft.com> Reviewed-by: Dan Clark <daniec@microsoft.com> Reviewed-by: Rohan Raja <roraja@microsoft.com> Cr-Commit-Position: refs/heads/main@{#1517125}
diff --git a/clipboard-apis/async-clipboard-read-unsanitized-null.https.html b/clipboard-apis/async-clipboard-read-unsanitized-null.https.html
@@ -0,0 +1,28 @@
+<!doctype html>
+<meta charset="utf-8">
+<title>Async Clipboard read with unsanitized:null should not crash</title>
+<body>Body needed for test_driver.click()</body>
+<script src="/resources/testharness.js"></script>
+<script src="/resources/testharnessreport.js"></script>
+<script src="/resources/testdriver.js"></script>
+<script src="/resources/testdriver-vendor.js"></script>
+<script src="resources/user-activation.js"></script>
+<script>
+'use strict';
+
+promise_test(async t => {
+  await tryGrantReadPermission();
+  await tryGrantWritePermission();
+
+  const textInput = "<p>hello</p>";
+  const format1 = 'text/html';
+  const blobInput1 = new Blob([textInput], {type: format1});
+  const clipboardItemInput = new ClipboardItem({[format1]: blobInput1});
+
+  await waitForUserActivation();
+  await navigator.clipboard.write([clipboardItemInput]);
+  await waitForUserActivation();
+  const items = navigator.clipboard.read({unsanitized: null});
+  await promise_rejects_js(t, TypeError, items);
+}, 'unsanitized: null should reject with TypeError');
+</script>
