forked from mirrors/gecko-dev
f7f761df87
MozReview-Commit-ID: 370JbqadhaQ --HG-- extra : rebase_source : 81c5e068292a8b86f263cc81d94764fd906a7e24
45 lines
2.4 KiB
JavaScript
45 lines
2.4 KiB
JavaScript
/*
|
|
* Any copyright is dedicated to the Public Domain.
|
|
* http://creativecommons.org/publicdomain/zero/1.0/
|
|
*
|
|
* Tests for Bug 947079 - Fix bug in nsSecureBrowserUIImpl that sets the wrong
|
|
* security state on a page because of a subresource load that is not on the
|
|
* same page.
|
|
*/
|
|
|
|
// We use different domains for each test and for navigation within each test
|
|
const HTTP_TEST_ROOT_1 = getRootDirectory(gTestPath).replace("chrome://mochitests/content", "http://example.com");
|
|
const HTTPS_TEST_ROOT_1 = getRootDirectory(gTestPath).replace("chrome://mochitests/content", "https://test1.example.com");
|
|
const HTTP_TEST_ROOT_2 = getRootDirectory(gTestPath).replace("chrome://mochitests/content", "http://example.net");
|
|
const HTTPS_TEST_ROOT_2 = getRootDirectory(gTestPath).replace("chrome://mochitests/content", "https://test2.example.com");
|
|
|
|
add_task(async function() {
|
|
let url = HTTP_TEST_ROOT_1 + "file_mixedContentFromOnunload.html";
|
|
await BrowserTestUtils.withNewTab(url, async function(browser) {
|
|
await SpecialPowers.pushPrefEnv({
|
|
"set": [
|
|
["security.mixed_content.block_active_content", true],
|
|
["security.mixed_content.block_display_content", false]
|
|
]
|
|
});
|
|
// Navigation from an http page to a https page with no mixed content
|
|
// The http page loads an http image on unload
|
|
url = HTTPS_TEST_ROOT_1 + "file_mixedContentFromOnunload_test1.html";
|
|
await BrowserTestUtils.loadURI(browser, url);
|
|
await BrowserTestUtils.browserLoaded(browser);
|
|
// check security state. Since current url is https and doesn't have any
|
|
// mixed content resources, we expect it to be secure.
|
|
isSecurityState(browser, "secure");
|
|
await assertMixedContentBlockingState(browser, {activeLoaded: false, activeBlocked: false, passiveLoaded: false});
|
|
// Navigation from an http page to a https page that has mixed display content
|
|
// The https page loads an http image on unload
|
|
url = HTTP_TEST_ROOT_2 + "file_mixedContentFromOnunload.html";
|
|
await BrowserTestUtils.loadURI(browser, url);
|
|
await BrowserTestUtils.browserLoaded(browser);
|
|
url = HTTPS_TEST_ROOT_2 + "file_mixedContentFromOnunload_test2.html";
|
|
await BrowserTestUtils.loadURI(browser, url);
|
|
await BrowserTestUtils.browserLoaded(browser);
|
|
isSecurityState(browser, "broken");
|
|
await assertMixedContentBlockingState(browser, {activeLoaded: false, activeBlocked: false, passiveLoaded: true});
|
|
});
|
|
});
|