• file
• revisions
• annotate
• diff
• comparison
• raw

js/xpconnect/tests/unit/test_bug813901.js@129ffea94266 (annotated)

js/xpconnect/tests/unit/test_bug813901.js

Sat, 03 Jan 2015 20:18:00 +0100

author

Michael Schloh von Bennewitz <michael@schloh.com>

date

Sat, 03 Jan 2015 20:18:00 +0100

branch

TOR_BUG_3246

changeset 7

129ffea94266

permissions

-rw-r--r--

Conditionally enable double key logic according to:
private browsing mode or privacy.thirdparty.isolate preference and
implement in GetCookieStringCommon and FindCookie where it counts...
With some reservations of how to convince FindCookie users to test
condition and pass a nullptr when disabling double key logic.

michael@0	1	/* This Source Code Form is subject to the terms of the Mozilla Public
michael@0	2	* License, v. 2.0. If a copy of the MPL was not distributed with this
michael@0	3	* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
michael@0	4
michael@0	5	/* See https://bugzilla.mozilla.org/show_bug.cgi?id=813901 */
michael@0	6
michael@0	7	const Cu = Components.utils;
michael@0	8
michael@0	9	// Make sure that we can't inject __exposedProps__ via the proto of a COW-ed object.
michael@0	10
michael@0	11	function checkThrows(expression, sb, regexp) {
michael@0	12	var result = Cu.evalInSandbox('(function() { try { ' + expression + '; return "allowed"; } catch (e) { return e.toString(); }})();', sb);
michael@0	13	dump('result: ' + result + '\n\n\n');
michael@0	14	do_check_true(!!regexp.exec(result));
michael@0	15	}
michael@0	16
michael@0	17	function run_test() {
michael@0	18
michael@0	19	var sb = new Cu.Sandbox('http://www.example.org');
michael@0	20	sb.obj = {foo: 2};
michael@0	21	checkThrows('obj.foo = 3;', sb, /denied/);
michael@0	22	Cu.evalInSandbox("var p = {__exposedProps__: {foo: 'rw'}};", sb);
michael@0	23	sb.obj.__proto__ = sb.p;
michael@0	24	checkThrows('obj.foo = 4;', sb, /__exposedProps__/);
michael@0	25	}