Wed, 31 Dec 2014 06:09:35 +0100
Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.
michael@0 | 1 | <!DOCTYPE HTML> |
michael@0 | 2 | <html> |
michael@0 | 3 | <!-- |
michael@0 | 4 | https://bugzilla.mozilla.org/show_bug.cgi?id=789713 |
michael@0 | 5 | --> |
michael@0 | 6 | <head> |
michael@0 | 7 | <meta charset="utf-8"> |
michael@0 | 8 | <title>Test for Bug 789713</title> |
michael@0 | 9 | <script type="application/javascript" src="/tests/SimpleTest/SimpleTest.js"></script> |
michael@0 | 10 | <link rel="stylesheet" type="text/css" href="/tests/SimpleTest/test.css"/> |
michael@0 | 11 | </head> |
michael@0 | 12 | <body> |
michael@0 | 13 | <a target="_blank" href="https://bugzilla.mozilla.org/show_bug.cgi?id=789713">Mozilla Bug 789713</a> |
michael@0 | 14 | <p id="display"></p> |
michael@0 | 15 | <div id="content" style="display: none"> |
michael@0 | 16 | <iframe id="ifr"></iframe> |
michael@0 | 17 | </div> |
michael@0 | 18 | <pre id="test"> |
michael@0 | 19 | <script type="application/javascript"> |
michael@0 | 20 | |
michael@0 | 21 | /** Test for Bug 789713 **/ |
michael@0 | 22 | |
michael@0 | 23 | function go() { |
michael@0 | 24 | var pass = true; |
michael@0 | 25 | var doc = document.getElementById('ifr').contentDocument; |
michael@0 | 26 | |
michael@0 | 27 | // Tree walkers use nsDOMGenericSH, which has a spineless PreCreate. |
michael@0 | 28 | var walker = doc.createTreeWalker(doc.body); |
michael@0 | 29 | pass = pass && (walker.root === doc.body); |
michael@0 | 30 | |
michael@0 | 31 | // Grab a reference to Object.prototype to make sure we test the machinery |
michael@0 | 32 | // with respect to standard prototype remapping. |
michael@0 | 33 | var objProto = ifr.contentWindow.Object.prototype; |
michael@0 | 34 | |
michael@0 | 35 | // First, do the document.domain operation. This shouldn't crash. |
michael@0 | 36 | document.domain = "example.org"; |
michael@0 | 37 | |
michael@0 | 38 | // Now, make sure that we still can't access cross-origin properties despite |
michael@0 | 39 | // the fact that the WN is shared under the hood. |
michael@0 | 40 | try { |
michael@0 | 41 | walker.root; |
michael@0 | 42 | pass = false; |
michael@0 | 43 | } catch (e) { pass = pass && /Permission denied/.exec(e.message); } |
michael@0 | 44 | window.parent.postMessage(pass, '*'); |
michael@0 | 45 | } |
michael@0 | 46 | |
michael@0 | 47 | // We can't set document.domain on mochi.test, because it's forbidden to set |
michael@0 | 48 | // document.domain to a TLD. |
michael@0 | 49 | var ifr = document.getElementById('ifr'); |
michael@0 | 50 | if (window.location.hostname == "mochi.test") { |
michael@0 | 51 | SimpleTest.waitForExplicitFinish(); |
michael@0 | 52 | ifr.src = window.location.toString().replace("mochi.test:8888", "test1.example.org").split('?')[0]; |
michael@0 | 53 | window.onmessage = function(message) { ok(message.data, "Test succeeded and didn't crash"); SimpleTest.finish(); }; |
michael@0 | 54 | } else { |
michael@0 | 55 | ifr.src = "file_empty.html"; |
michael@0 | 56 | ifr.onload = go; |
michael@0 | 57 | } |
michael@0 | 58 | |
michael@0 | 59 | </script> |
michael@0 | 60 | </pre> |
michael@0 | 61 | </body> |
michael@0 | 62 | </html> |