|
1 <!DOCTYPE HTML> |
|
2 <html> |
|
3 <!-- |
|
4 https://bugzilla.mozilla.org/show_bug.cgi?id=402788 |
|
5 --> |
|
6 <head> |
|
7 <title>Test for Bug 402788</title> |
|
8 <script type="text/javascript" src="/tests/SimpleTest/SimpleTest.js"></script> |
|
9 <link rel="stylesheet" type="text/css" href="/tests/SimpleTest/test.css" /> |
|
10 </head> |
|
11 <body> |
|
12 <a target="_blank" href="https://bugzilla.mozilla.org/show_bug.cgi?id=402788">Mozilla Bug 402788</a> |
|
13 <p id="display"></p> |
|
14 <div id="content" style="display: none"> |
|
15 |
|
16 </div> |
|
17 <pre id="test"> |
|
18 <script class="testbody" type="text/javascript"> |
|
19 |
|
20 /** Test for Bug 402788 **/ |
|
21 |
|
22 // return false if an exception has been catched, true otherwise |
|
23 function testRegisterHandler(aIsProtocol, aTxt, aUri, aTitle) |
|
24 { |
|
25 try { |
|
26 if (aIsProtocol) |
|
27 navigator.registerProtocolHandler(aTxt, aUri, aTitle); |
|
28 else |
|
29 navigator.registerContentHandler(aTxt, aUri, aTitle); |
|
30 } |
|
31 catch(e) { |
|
32 return false; |
|
33 } |
|
34 |
|
35 return true; |
|
36 } |
|
37 |
|
38 ok(navigator.registerProtocolHandler, "navigator.registerProtocolHandler should be defined"); |
|
39 ok(navigator.registerContentHandler, "navigator.registerContentHandler should be defined"); |
|
40 |
|
41 // testing a generic case |
|
42 is(true, testRegisterHandler(true, "foo", "http://mochi.test:8888/%s", "Foo handler"), "registering a foo protocol handler should work"); |
|
43 is(true, testRegisterHandler(false, "application/rss+xml", "http://mochi.test:8888/%s", "Foo handler"), "registering a foo content handler should work"); |
|
44 |
|
45 // testing with wrong uris |
|
46 is(false, testRegisterHandler(true, "foo", "http://mochi.test:8888/", "Foo handler"), "a protocol handler uri should contain %s"); |
|
47 is(false, testRegisterHandler(false, "application/rss+xml", "http://mochi.test:8888/", "Foo handler"), "a content handler uri should contain %s"); |
|
48 |
|
49 // the spec explicitly allows relative urls to be passed |
|
50 is(true, testRegisterHandler(true, "foo", "foo/%s", "Foo handler"), "a protocol handler uri should be valid"); |
|
51 is(true, testRegisterHandler(false, "application/rss+xml", "foo/%s", "Foo handler"), "a content handler uri should be valid"); |
|
52 |
|
53 // we should only accept to register when the handler has the same host as the current page (bug 402287) |
|
54 is(false, testRegisterHandler(true, "foo", "http://remotehost:8888/%s", "Foo handler"), "registering a foo protocol handler with a different host should not work"); |
|
55 is(false, testRegisterHandler(false, "application/rss+xml", "http://remotehost:8888/%s", "Foo handler"), "registering a foo content handler with a different host should not work"); |
|
56 |
|
57 // restriction to http(s) for the uri of the handler (bug 401343) |
|
58 // https should work (http already tested in the generic case) |
|
59 is(true, testRegisterHandler(true, "foo", "https://mochi.test:8888/%s", "Foo handler"), "registering a foo protocol handler with https scheme should work"); |
|
60 is(true, testRegisterHandler(false, "application/rss+xml", "https://mochi.test:8888/%s", "Foo handler"), "registering a foo content handler with https scheme should work"); |
|
61 // ftp should not work |
|
62 is(false, testRegisterHandler(true, "foo", "ftp://mochi.test:8888/%s", "Foo handler"), "registering a foo protocol handler with ftp scheme should not work"); |
|
63 is(false, testRegisterHandler(false, "application/rss+xml", "ftp://mochi.test:8888/%s", "Foo handler"), "registering a foo content handler with ftp scheme should not work"); |
|
64 // chrome should not work |
|
65 is(false, testRegisterHandler(true, "foo", "chrome://mochi.test:8888/%s", "Foo handler"), "registering a foo protocol handler with chrome scheme should not work"); |
|
66 is(false, testRegisterHandler(false, "application/rss+xml", "chrome://mochi.test:8888/%s", "Foo handler"), "registering a foo content handler with chrome scheme should not work"); |
|
67 // foo should not work |
|
68 is(false, testRegisterHandler(true, "foo", "foo://mochi.test:8888/%s", "Foo handler"), "registering a foo protocol handler with foo scheme should not work"); |
|
69 is(false, testRegisterHandler(false, "application/rss+xml", "foo://mochi.test:8888/%s", "Foo handler"), "registering a foo content handler with foo scheme should not work"); |
|
70 |
|
71 // for security reasons, protocol handlers should never be registered for some schemes (chrome, vbscript, ...) (bug 402788) |
|
72 is(false, testRegisterHandler(true, "chrome", "http://mochi.test:8888/%s", "chrome handler"), "registering a chrome protocol handler should not work"); |
|
73 is(false, testRegisterHandler(true, "vbscript", "http://mochi.test:8888/%s", "vbscript handler"), "registering a vbscript protocol handler should not work"); |
|
74 is(false, testRegisterHandler(true, "javascript", "http://mochi.test:8888/%s", "javascript handler"), "registering a javascript protocol handler should not work"); |
|
75 is(false, testRegisterHandler(true, "moz-icon", "http://mochi.test:8888/%s", "moz-icon handler"), "registering a moz-icon protocol handler should not work"); |
|
76 |
|
77 // for security reasons, content handlers should never be registered for some types (html, ...) |
|
78 is(true, testRegisterHandler(false, "application/rss+xml", "http://mochi.test:8888/%s", "Foo handler"), "registering rss content handlers should work"); |
|
79 is(true, testRegisterHandler(false, "application/atom+xml", "http://mochi.test:8888/%s", "Foo handler"), "registering atom content handlers should work"); |
|
80 todo(false, testRegisterHandler(false, "text/html", "http://mochi.test:8888/%s", "Foo handler"), "registering html content handlers should not work"); // bug 403798 |
|
81 |
|
82 </script> |
|
83 </pre> |
|
84 </body> |
|
85 </html> |