netwerk/test/unit/test_bug380994.js

Thu, 15 Jan 2015 15:55:04 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Thu, 15 Jan 2015 15:55:04 +0100
branch
TOR_BUG_9701
changeset 9
a63d609f5ebe
permissions
-rw-r--r--

Back out 97036ab72558 which inappropriately compared turds to third parties.

michael@0 1 /* check resource: protocol for traversal problems */
michael@0 2
michael@0 3 const specs = [
michael@0 4 "resource:///chrome/../plugins",
michael@0 5 "resource:///chrome%2f../plugins",
michael@0 6 "resource:///chrome/..%2fplugins",
michael@0 7 "resource:///chrome%2f%2e%2e%2fplugins",
michael@0 8 "resource:///../../../..",
michael@0 9 "resource:///..%2f..%2f..%2f..",
michael@0 10 "resource:///%2e%2e"
michael@0 11 ];
michael@0 12
michael@0 13 function run_test() {
michael@0 14 var ios = Cc["@mozilla.org/network/io-service;1"].
michael@0 15 getService(Ci.nsIIOService);
michael@0 16
michael@0 17 for each (spec in specs) {
michael@0 18 var uri = ios.newURI(spec, null, null);
michael@0 19 if (uri.spec.indexOf("..") != -1)
michael@0 20 do_throw("resource: traversal remains: '"+spec+"' ==> '"+uri.spec+"'");
michael@0 21 }
michael@0 22 }

mercurial