mirror of
https://github.com/mozilla/gecko-dev.git
synced 2025-11-10 21:28:04 +02:00
679a8809c5
Differential Revision: https://phabricator.services.mozilla.com/D23037 --HG-- extra : moz-landing-system : lando
77 lines
2.7 KiB
JavaScript
77 lines
2.7 KiB
JavaScript
/* Any copyright is dedicated to the Public Domain.
|
|
http://creativecommons.org/publicdomain/zero/1.0/ */
|
|
|
|
function test() {
|
|
waitForExplicitFinish();
|
|
|
|
// data: URI will only inherit principal only when the pref is false.
|
|
Services.prefs.setBoolPref("security.data_uri.unique_opaque_origin", false);
|
|
// data: URIs will only open at the top level when the pref is false
|
|
// or the use of system principal but we can't use that to test here.
|
|
Services.prefs.setBoolPref("security.data_uri.block_toplevel_data_uri_navigations", false);
|
|
registerCleanupFunction(function() {
|
|
Services.prefs.clearUserPref("security.data_uri.unique_opaque_origin");
|
|
Services.prefs.clearUserPref("security.data_uri.block_toplevel_data_uri_navigations");
|
|
});
|
|
|
|
executeSoon(startTest);
|
|
}
|
|
|
|
function startTest() {
|
|
let tab = gBrowser.selectedTab = BrowserTestUtils.addTab(gBrowser);
|
|
|
|
let browser = gBrowser.getBrowserForTab(tab);
|
|
|
|
function loadURL(url, flags, triggeringPrincipal, func) {
|
|
BrowserTestUtils.browserLoaded(browser, false, url).then(() => {
|
|
func();
|
|
});
|
|
browser.loadURI(url, { flags, triggeringPrincipal });
|
|
}
|
|
|
|
// Load a normal http URL
|
|
function testURL(url, func) {
|
|
let secMan = Services.scriptSecurityManager;
|
|
let ios = Services.io;
|
|
let artificialPrincipal = secMan.createCodebasePrincipal(ios.newURI("http://example.com/"), {});
|
|
loadURL("http://example.com/", 0, artificialPrincipal, function() {
|
|
let pagePrincipal = browser.contentPrincipal;
|
|
ok(pagePrincipal, "got principal for http:// page");
|
|
|
|
// Now load the URL normally
|
|
loadURL(url, 0, artificialPrincipal, function() {
|
|
ok(browser.contentPrincipal.equals(pagePrincipal), url + " should inherit principal");
|
|
|
|
// Now load the URL and disallow inheriting the principal
|
|
let webNav = Ci.nsIWebNavigation;
|
|
loadURL(url, webNav.LOAD_FLAGS_DISALLOW_INHERIT_PRINCIPAL, artificialPrincipal, function() {
|
|
let newPrincipal = browser.contentPrincipal;
|
|
ok(newPrincipal, "got inner principal");
|
|
ok(!newPrincipal.equals(pagePrincipal),
|
|
url + " should not inherit principal when loaded with DISALLOW_INHERIT_OWNER");
|
|
|
|
func();
|
|
});
|
|
});
|
|
});
|
|
}
|
|
|
|
let urls = [
|
|
"data:text/html,<body>hi",
|
|
// We used to test javascript: here as well, but now that we no longer run
|
|
// javascript: in a sandbox, we end up not running it at all in the
|
|
// DISALLOW_INHERIT_OWNER case, so never actually do a load for it at all.
|
|
];
|
|
|
|
function nextTest() {
|
|
let url = urls.shift();
|
|
if (url) {
|
|
testURL(url, nextTest);
|
|
} else {
|
|
gBrowser.removeTab(tab);
|
|
finish();
|
|
}
|
|
}
|
|
|
|
nextTest();
|
|
}
|