The Tor Browser / file diff

     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/content/base/test/csp/file_CSP_bug910139.sjs	Wed Dec 31 06:09:35 2014 +0100
     1.3 @@ -0,0 +1,52 @@
     1.4 +// Server side js file for bug 910139, see file test_CSP_bug910139.html for details.
     1.5 +
     1.6 +Components.utils.import("resource://gre/modules/NetUtil.jsm");
     1.7 +
     1.8 +function loadResponseFromFile(path) {
     1.9 +  var testHTMLFile =
    1.10 +    Components.classes["@mozilla.org/file/directory_service;1"].
    1.11 +    getService(Components.interfaces.nsIProperties).
    1.12 +    get("CurWorkD", Components.interfaces.nsILocalFile);
    1.13 +  var dirs = path.split("/");
    1.14 +  for (var i = 0; i < dirs.length; i++) {
    1.15 +    testHTMLFile.append(dirs[i]);
    1.16 +  }
    1.17 +  var testHTMLFileStream =
    1.18 +    Components.classes["@mozilla.org/network/file-input-stream;1"].
    1.19 +    createInstance(Components.interfaces.nsIFileInputStream);
    1.20 +  testHTMLFileStream.init(testHTMLFile, -1, 0, 0);
    1.21 +  var testHTML = NetUtil.readInputStreamToString(testHTMLFileStream, testHTMLFileStream.available());
    1.22 +  return testHTML;
    1.23 +}
    1.24 +
    1.25 +var policies = [
    1.26 +  "default-src 'self'; script-src 'self'",       // CSP for checkAllowed
    1.27 +  "default-src 'self'; script-src *.example.com" // CSP for checkBlocked
    1.28 +]
    1.29 +
    1.30 +function getPolicy() {
    1.31 +  var index;
    1.32 +  // setState only accepts strings as arguments
    1.33 +  if (!getState("counter")) {
    1.34 +    index = 0;
    1.35 +    setState("counter", index.toString());
    1.36 +  }
    1.37 +  else {
    1.38 +    index = parseInt(getState("counter"));
    1.39 +    ++index;
    1.40 +    setState("counter", index.toString());
    1.41 +  }
    1.42 +  return policies[index];
    1.43 +}
    1.44 +
    1.45 +function handleRequest(request, response)
    1.46 +{
    1.47 +  // avoid confusing cache behaviors
    1.48 +  response.setHeader("Cache-Control", "no-cache", false);
    1.49 +
    1.50 +  // set the required CSP
    1.51 +  response.setHeader("Content-Security-Policy", getPolicy(), false);
    1.52 +
    1.53 +  // return the requested XML file.
    1.54 +  response.write(loadResponseFromFile("tests/content/base/test/csp/file_CSP_bug910139.xml"));
    1.55 +}