forked from mirrors/gecko-dev
bcdc3a9567
# ignore-this-changeset Differential Revision: https://phabricator.services.mozilla.com/D35900 --HG-- extra : source : b08f475f1140b9e650b316ee2813c13ec9947678
96 lines
2.8 KiB
JavaScript
96 lines
2.8 KiB
JavaScript
/* Any copyright is dedicated to the Public Domain.
|
|
http://creativecommons.org/publicdomain/zero/1.0/ */
|
|
|
|
function test() {
|
|
waitForExplicitFinish();
|
|
|
|
// data: URI will only inherit principal only when the pref is false.
|
|
Services.prefs.setBoolPref("security.data_uri.unique_opaque_origin", false);
|
|
// data: URIs will only open at the top level when the pref is false
|
|
// or the use of system principal but we can't use that to test here.
|
|
Services.prefs.setBoolPref(
|
|
"security.data_uri.block_toplevel_data_uri_navigations",
|
|
false
|
|
);
|
|
registerCleanupFunction(function() {
|
|
Services.prefs.clearUserPref("security.data_uri.unique_opaque_origin");
|
|
Services.prefs.clearUserPref(
|
|
"security.data_uri.block_toplevel_data_uri_navigations"
|
|
);
|
|
});
|
|
|
|
executeSoon(startTest);
|
|
}
|
|
|
|
function startTest() {
|
|
let tab = (gBrowser.selectedTab = BrowserTestUtils.addTab(gBrowser));
|
|
|
|
let browser = gBrowser.getBrowserForTab(tab);
|
|
|
|
function loadURL(url, flags, triggeringPrincipal, func) {
|
|
BrowserTestUtils.browserLoaded(browser, false, url).then(() => {
|
|
func();
|
|
});
|
|
browser.loadURI(url, { flags, triggeringPrincipal });
|
|
}
|
|
|
|
// Load a normal http URL
|
|
function testURL(url, func) {
|
|
let secMan = Services.scriptSecurityManager;
|
|
let ios = Services.io;
|
|
let artificialPrincipal = secMan.createCodebasePrincipal(
|
|
ios.newURI("http://example.com/"),
|
|
{}
|
|
);
|
|
loadURL("http://example.com/", 0, artificialPrincipal, function() {
|
|
let pagePrincipal = browser.contentPrincipal;
|
|
ok(pagePrincipal, "got principal for http:// page");
|
|
|
|
// Now load the URL normally
|
|
loadURL(url, 0, artificialPrincipal, function() {
|
|
ok(
|
|
browser.contentPrincipal.equals(pagePrincipal),
|
|
url + " should inherit principal"
|
|
);
|
|
|
|
// Now load the URL and disallow inheriting the principal
|
|
let webNav = Ci.nsIWebNavigation;
|
|
loadURL(
|
|
url,
|
|
webNav.LOAD_FLAGS_DISALLOW_INHERIT_PRINCIPAL,
|
|
artificialPrincipal,
|
|
function() {
|
|
let newPrincipal = browser.contentPrincipal;
|
|
ok(newPrincipal, "got inner principal");
|
|
ok(
|
|
!newPrincipal.equals(pagePrincipal),
|
|
url +
|
|
" should not inherit principal when loaded with DISALLOW_INHERIT_OWNER"
|
|
);
|
|
|
|
func();
|
|
}
|
|
);
|
|
});
|
|
});
|
|
}
|
|
|
|
let urls = [
|
|
"data:text/html,<body>hi",
|
|
// We used to test javascript: here as well, but now that we no longer run
|
|
// javascript: in a sandbox, we end up not running it at all in the
|
|
// DISALLOW_INHERIT_OWNER case, so never actually do a load for it at all.
|
|
];
|
|
|
|
function nextTest() {
|
|
let url = urls.shift();
|
|
if (url) {
|
|
testURL(url, nextTest);
|
|
} else {
|
|
gBrowser.removeTab(tab);
|
|
finish();
|
|
}
|
|
}
|
|
|
|
nextTest();
|
|
}
|