forked from mirrors/gecko-dev
		
	
		
			
				
	
	
		
			141 lines
		
	
	
	
		
			5.2 KiB
		
	
	
	
		
			HTML
		
	
	
	
	
	
			
		
		
	
	
			141 lines
		
	
	
	
		
			5.2 KiB
		
	
	
	
		
			HTML
		
	
	
	
	
	
| <!DOCTYPE HTML>
 | |
| <html>
 | |
| <!--
 | |
| https://bugzilla.mozilla.org/show_bug.cgi?id=341604
 | |
| Implement HTML5 sandbox attribute for IFRAMEs
 | |
| -->
 | |
| <head>
 | |
|   <meta charset="utf-8">
 | |
|   <title>Test for Bug 341604 - plugins</title>
 | |
|   <script type="application/javascript" src="/tests/SimpleTest/SimpleTest.js"></script>
 | |
|   <script type="application/javascript" src="plugin-utils.js"></script>
 | |
|   <script type="application/javascript">
 | |
|     setTestPluginEnabledState(SpecialPowers.Ci.nsIPluginTag.STATE_ENABLED);
 | |
|   </script>
 | |
|   <link rel="stylesheet" type="text/css" href="/tests/SimpleTest/test.css"/>
 | |
| </head>
 | |
| <script type="application/javascript">
 | |
| /** Test for Bug 341604 - Implement HTML5 sandbox attribute for IFRAMEs **/
 | |
| /** Plugin tests **/
 | |
| SimpleTest.waitForExplicitFinish();
 | |
| 
 | |
| function doTest() {
 | |
|   // 1) test that a plugin can't be loaded with <embed> inside a sandboxed <iframe>
 | |
|   // (done by file_iframe_sandbox_f_if1.html loaded in if1 below)
 | |
|   // 2) test that a plugin can't be loaded with <object> inside a sandboxed <iframe>
 | |
|   // (done by file_iframe_sandbox_f_if1.html loaded in if1 below)
 | |
|   // 3) test that plugin can't be loaded by a sandboxed <iframe> with src pointing to
 | |
|   // a document that is handled by a plugin (done by if_2 below)
 | |
|   // 4) test that when a plugin is loaded in an unsandboxed iframe, a sandbox attribute
 | |
|   // is then added to the iframe and the document containing the plugin is reloaded,
 | |
|   // the plugin does not load in the sandboxed iframe (done with if_3 below)
 | |
|   // 5) test that when when a sandboxed iframe's sandbox attribute is removed,
 | |
|   // and a new document is loaded into the iframe, the plugin loads
 | |
|   // (done with if_4 below)
 | |
| 
 | |
|   // these are all handled by checking how many instances of the test plugin are loaded
 | |
|   // when this script runs as the onload handler - there should be two instances,
 | |
|   // initially the one loaded directly by this page itself, and the one loaded during
 | |
|   // test #4 above.
 | |
|   var p = document.getElementById('plugin1');
 | |
|   var if_1 = document.getElementById('if_1');
 | |
|   p.startWatchingInstanceCount();
 | |
| 
 | |
|   if_1.src = 'file_iframe_sandbox_f_if1.html';
 | |
| }
 | |
| 
 | |
| function if_1_load() {
 | |
|   var if_1 = document.getElementById('if_1');
 | |
| 
 | |
|   if (if_1.src == "about:blank")
 | |
|     return;
 | |
| 
 | |
|   // need to wait for plugin to load, if the test fails...
 | |
|   SimpleTest.executeSoon(if_1_continue);
 | |
| }
 | |
| 
 | |
| function if_1_continue() {
 | |
|   // instance count should be 0 (tests #1 and #2 above)
 | |
|   var p = document.getElementById('plugin1');
 | |
|   is(p.getInstanceCount(), 0, "plugins should not be loaded via <object> or <embed> by a sandboxed iframe");
 | |
| 
 | |
|   var if_2 = document.getElementById('if_2');
 | |
|   if_2.src = 'file_iframe_sandbox_f_if2.html';
 | |
| 
 | |
|   SimpleTest.executeSoon(if_2_continue);
 | |
| }
 | |
| 
 | |
| function if_2_continue() {
 | |
|   // instance count should be 0 (test #3 above)
 | |
|   var p = document.getElementById('plugin1');
 | |
| 
 | |
|   is(p.getInstanceCount(), 0, "plugins should not be loaded via a document of a type that requires a plugin embedded in a sandboxed iframe");
 | |
| 
 | |
|   SimpleTest.executeSoon(if_3_test);
 | |
| }
 | |
| 
 | |
| function if_3_test() {
 | |
|   var if_3 = document.getElementById('if_3');
 | |
|   // add sandbox attribute
 | |
|   if_3.sandbox = '';
 | |
|   if_3.src = 'file_iframe_sandbox_f_if1.html';
 | |
| }
 | |
| 
 | |
| function if_3_load() {
 | |
|   if (if_3.src == "about:blank")
 | |
|     return;
 | |
| 
 | |
|   SimpleTest.executeSoon(if_3_continue);
 | |
| }
 | |
| 
 | |
| function if_3_continue() {
 | |
|   var p = document.getElementById('plugin1');
 | |
|   is(p.getInstanceCount(), 0, "plugins should not be loaded when a sandbox attribute is added" +
 | |
|      "to an iframe and a document containing a plugin is then loaded into the iframe");
 | |
| 
 | |
|   SimpleTest.executeSoon(if_4_test);
 | |
| }
 | |
| 
 | |
| function if_4_test() {
 | |
|   var if_4 = document.getElementById('if_4');
 | |
|   // remove sandbox attribute
 | |
|   if_4.removeAttribute('sandbox');
 | |
|   if_4.src = 'file_iframe_sandbox_f_if1.html';
 | |
| }
 | |
| 
 | |
| function if_4_load() {
 | |
|   if (if_4.src == "about:blank")
 | |
|     return;
 | |
| 
 | |
|   SimpleTest.executeSoon(if_4_continue);
 | |
| }
 | |
| 
 | |
| function if_4_continue() {
 | |
|   var p = document.getElementById('plugin1');
 | |
|   // there are 2 plugin instances in file_iframe_sandbox_if1.html loaded by
 | |
|   // if_1, they should successfully load.
 | |
|   is(p.getInstanceCount(), 2, "plugins should be loaded when a sandbox attribute is removed " +
 | |
|      "from an iframe and a document containing a plugin is then loaded into the iframe");
 | |
| 
 | |
|   p.stopWatchingInstanceCount();
 | |
|   SimpleTest.executeSoon(finish_test);
 | |
| }
 | |
| 
 | |
| function finish_test() {
 | |
|   SimpleTest.finish();
 | |
| }
 | |
| 
 | |
| addLoadEvent(doTest);
 | |
| </script>
 | |
| <body>
 | |
| <a target="_blank" href="https://bugzilla.mozilla.org/show_bug.cgi?id=341604">Mozilla Bug 341604</a> - Implement HTML5 sandbox attribute for IFRAMEs
 | |
| <p id="display"></p>
 | |
| <div id="content">
 | |
| <embed id="plugin1" type="application/x-test" width="200" height="200"></embed>
 | |
| <iframe id="if_1" sandbox='allow-same-origin' onLoad='if_1_load()' src="about:blank" height="400" width="400"></iframe>
 | |
| <iframe id="if_2" sandbox='allow-same-origin' src="about:blank" height="400" width="400"></iframe>
 | |
| <iframe id="if_3" src="about:blank" onload='if_3_load()' height="400" width="400"></iframe>
 | |
| <iframe id="if_4" sandbox='allow-same-origin' onload='if_4_load()' src="about:blank" height="400" width="400"></iframe>
 | |
| </div>
 | |
| </body>
 | |
| </html>
 | 
