The Tor Browser / file comparison
comparison: js/xpconnect/tests/unit/test_bug813901.js
js/xpconnect/tests/unit/test_bug813901.js
- branch
- TOR_BUG_3246
- changeset 7
- 129ffea94266
equal
deleted
inserted
replaced
| -1:000000000000 | 0:f23d0040f5ca |
|---|---|
| 1 /* This Source Code Form is subject to the terms of the Mozilla Public | |
| 2 * License, v. 2.0. If a copy of the MPL was not distributed with this | |
| 3 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ | |
| 4 | |
| 5 /* See https://bugzilla.mozilla.org/show_bug.cgi?id=813901 */ | |
| 6 | |
| 7 const Cu = Components.utils; | |
| 8 | |
| 9 // Make sure that we can't inject __exposedProps__ via the proto of a COW-ed object. | |
| 10 | |
| 11 function checkThrows(expression, sb, regexp) { | |
| 12 var result = Cu.evalInSandbox('(function() { try { ' + expression + '; return "allowed"; } catch (e) { return e.toString(); }})();', sb); | |
| 13 dump('result: ' + result + '\n\n\n'); | |
| 14 do_check_true(!!regexp.exec(result)); | |
| 15 } | |
| 16 | |
| 17 function run_test() { | |
| 18 | |
| 19 var sb = new Cu.Sandbox('http://www.example.org'); | |
| 20 sb.obj = {foo: 2}; | |
| 21 checkThrows('obj.foo = 3;', sb, /denied/); | |
| 22 Cu.evalInSandbox("var p = {__exposedProps__: {foo: 'rw'}};", sb); | |
| 23 sb.obj.__proto__ = sb.p; | |
| 24 checkThrows('obj.foo = 4;', sb, /__exposedProps__/); | |
| 25 } |
