<!DOCTYPE html>
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
<script src="/resources/testdriver.js"></script>
<script src="/resources/testdriver-vendor.js"></script>
<script src="/bluetooth/resources/bluetooth-helpers.js"></script>
<body>
<script>
'use strict';
const test_desc = 'Request device from a unique origin. ' +
    'Should reject with SecurityError.';
const cross_origin_src = 'https://{{domains[www]}}:{{ports[https][0]}}' +
    '/bluetooth/resources/health-thermometer-iframe.html'
let iframe = document.createElement('iframe');

bluetooth_test(
    () => setUpHealthThermometerDevice()
              // 1. Load the iframe.
              .then(() => new Promise(resolve => {
                      iframe.src = cross_origin_src;
                      document.body.appendChild(iframe);
                      iframe.addEventListener('load', resolve);
                    }))
              // 2. Request the device from the iframe.
              .then(() => new Promise(resolve => {
                      callWithTrustedClick(() => {
                        iframe.contentWindow.postMessage(
                            {type: 'RequestDevice'}, '*');
                      });

                      window.onmessage = messageEvent => {
                        assert_equals(
                            messageEvent.data,
                            'SecurityError: requestDevice() ' +
                                'called from cross-origin iframe.');
                        resolve();
                      }
                    })),
    test_desc);
</script>
</body>
