Sat, 03 Jan 2015 20:18:00 +0100
Conditionally enable double key logic according to:
private browsing mode or privacy.thirdparty.isolate preference and
implement in GetCookieStringCommon and FindCookie where it counts...
With some reservations of how to convince FindCookie users to test
condition and pass a nullptr when disabling double key logic.
michael@0 | 1 | <!DOCTYPE HTML> |
michael@0 | 2 | <html> |
michael@0 | 3 | <!-- |
michael@0 | 4 | https://bugzilla.mozilla.org/show_bug.cgi?id=505915 |
michael@0 | 5 | --> |
michael@0 | 6 | <head> |
michael@0 | 7 | <title>Test for Bug 505915</title> |
michael@0 | 8 | <script type="application/javascript" src="/tests/SimpleTest/SimpleTest.js"></script> |
michael@0 | 9 | <link rel="stylesheet" type="text/css" href="/tests/SimpleTest/test.css"/> |
michael@0 | 10 | </head> |
michael@0 | 11 | <body> |
michael@0 | 12 | <a target="_blank" href="https://bugzilla.mozilla.org/show_bug.cgi?id=505915">Mozilla Bug 505915</a> |
michael@0 | 13 | <p id="display"></p> |
michael@0 | 14 | <div id="content" style="display: none"> |
michael@0 | 15 | |
michael@0 | 16 | </div> |
michael@0 | 17 | <pre id="test"> |
michael@0 | 18 | <script type="application/javascript;version=1.7"> |
michael@0 | 19 | |
michael@0 | 20 | /** Test for Bug 505915 **/ |
michael@0 | 21 | window.addEventListener("message", function () { gen.next() }, false); |
michael@0 | 22 | |
michael@0 | 23 | function go() { |
michael@0 | 24 | var ifr = $('ifr'); |
michael@0 | 25 | try { |
michael@0 | 26 | // NB: the contentDocument getter now returns null for cross-origin |
michael@0 | 27 | // frames, so use SpecialPowers to get a security wrapper to the document. |
michael@0 | 28 | var xdoc = SpecialPowers.unwrap(SpecialPowers.wrap(ifr).contentDocument) |
michael@0 | 29 | document.createTreeWalker(xdoc, 0, null); |
michael@0 | 30 | ok(false, "should have thrown a security exception"); |
michael@0 | 31 | } catch (e) { |
michael@0 | 32 | ok(/NS_ERROR_XPC_SECURITY_MANAGER_VETO/.test(e) || |
michael@0 | 33 | /TypeError: Argument 1 of Document.createTreeWalker does not implement interface Node/.test(e), |
michael@0 | 34 | "threw a security exception or binding exception instead of an " + |
michael@0 | 35 | "invalid child exception"); |
michael@0 | 36 | } |
michael@0 | 37 | |
michael@0 | 38 | SimpleTest.finish(); |
michael@0 | 39 | yield; |
michael@0 | 40 | } |
michael@0 | 41 | |
michael@0 | 42 | SimpleTest.waitForExplicitFinish(); |
michael@0 | 43 | |
michael@0 | 44 | </script> |
michael@0 | 45 | </pre> |
michael@0 | 46 | |
michael@0 | 47 | <iframe id="ifr" onload="gen = go(); gen.next();" src="http://example.org/"></iframe> |
michael@0 | 48 | |
michael@0 | 49 | </body> |
michael@0 | 50 | </html> |