1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000
1.2 +++ b/caps/tests/mochitest/test_bug292789.html Wed Dec 31 06:09:35 2014 +0100
1.3 @@ -0,0 +1,105 @@
1.4 +<!DOCTYPE HTML>
1.5 +<html>
1.6 +<!--
1.7 +https://bugzilla.mozilla.org/show_bug.cgi?id=292789
1.8 +-->
1.9 +<head>
1.10 + <title>Test for Bug 292789</title>
1.11 + <script type="text/javascript" src="/tests/SimpleTest/SimpleTest.js"></script>
1.12 + <link rel="stylesheet" type="text/css" href="/tests/SimpleTest/test.css" />
1.13 +</head>
1.14 +<body>
1.15 +<a target="_blank" href="https://bugzilla.mozilla.org/show_bug.cgi?id=292789">Mozilla Bug 292789</a>
1.16 +<p id="display"></p>
1.17 +<div id="content" style="display: none">
1.18 + <script src="chrome://global/content/treeUtils.js"></script>
1.19 + <script type="application/javascript;version=1.8" src="chrome://mozapps/content/xpinstall/xpinstallConfirm.js"></script>
1.20 + <script id="resjs" type="application/javascript;version=1.8"></script>
1.21 +</div>
1.22 +<pre id="test">
1.23 +<script class="testbody" type="text/javascript">
1.24 +
1.25 +/** Test for Bug 292789
1.26 + **
1.27 + ** Selectively allow access to whitelisted chrome packages
1.28 + ** even for ALLOW_CHROME mechanisms (<script>, <img> etc)
1.29 + **/
1.30 +
1.31 +SimpleTest.waitForExplicitFinish();
1.32 +
1.33 +/** <script src=""> test **/
1.34 +function testScriptSrc(aCallback) {
1.35 + is(typeof gTreeUtils.sort, "function",
1.36 + "content can still load <script> from chrome://global");
1.37 + is(typeof XPInstallConfirm, "undefined",
1.38 + "content should not be able to load <script> from chrome://mozapps");
1.39 +
1.40 + /** make sure the last one didn't pass because someone
1.41 + ** moved the resource
1.42 + **/
1.43 + var resjs = document.getElementById("resjs");
1.44 + resjs.onload = scriptOnload;
1.45 + resjs.src = "resource://gre/chrome/toolkit/content/mozapps/xpinstall/xpinstallConfirm.js";
1.46 + document.getElementById("content").appendChild(resjs);
1.47 +
1.48 + function scriptOnload() {
1.49 + is(typeof XPInstallConfirm, "object",
1.50 + "xpinstallConfirm.js has not moved unexpectedly");
1.51 +
1.52 + // trigger the callback
1.53 + if (aCallback)
1.54 + aCallback();
1.55 + }
1.56 +}
1.57 +
1.58 +/** <img src=""> tests **/
1.59 +var img_global = "chrome://global/skin/icons/Error.png";
1.60 +var img_mozapps = "chrome://mozapps/skin/passwordmgr/key.png";
1.61 +var res_mozapps = "resource://gre/chrome/toolkit/skin/classic/mozapps/passwordmgr/key.png";
1.62 +
1.63 +var imgTests = [[img_global, "success"],
1.64 + [img_mozapps, "fail"],
1.65 + [res_mozapps, "success"]];
1.66 +
1.67 +var curImgTest = 0;
1.68 +
1.69 +function runImgTest() {
1.70 + var test = imgTests[curImgTest++];
1.71 + var callback = curImgTest == imgTests.length ? finishTest : runImgTest;
1.72 + loadImage(test[0], test[1], callback);
1.73 +}
1.74 +
1.75 +function finishTest() {
1.76 + SimpleTest.finish();
1.77 +}
1.78 +
1.79 +function fail(event) {
1.80 + is(event.target.expected, "fail",
1.81 + "content should not be allowed to load "+event.target.src);
1.82 + if (event.target.callback)
1.83 + event.target.callback();
1.84 +}
1.85 +
1.86 +function success(event) {
1.87 + is(event.target.expected, "success",
1.88 + "content should be able to load "+event.target.src);
1.89 + if (event.target.callback)
1.90 + event.target.callback();
1.91 +}
1.92 +
1.93 +function loadImage(uri, expect, callback) {
1.94 + var img = document.createElement("img");
1.95 + img.onerror = fail;
1.96 + img.onload = success;
1.97 + img.expected = expect;
1.98 + img.callback = callback;
1.99 + img.src = uri;
1.100 + //document.getElementById("content").appendChild(img);
1.101 +}
1.102 +
1.103 +// Start off the script src test, and have it start the img tests when complete.
1.104 +testScriptSrc(runImgTest);
1.105 +</script>
1.106 +</pre>
1.107 +</body>
1.108 +</html>
