js/xpconnect/tests/chrome/test_bug996069.xul

changeset 0
6474c204b198
     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/js/xpconnect/tests/chrome/test_bug996069.xul	Wed Dec 31 06:09:35 2014 +0100
     1.3 @@ -0,0 +1,53 @@
     1.4 +<?xml version="1.0"?>
     1.5 +<?xml-stylesheet type="text/css" href="chrome://global/skin"?>
     1.6 +<?xml-stylesheet type="text/css" href="chrome://mochikit/content/tests/SimpleTest/test.css"?>
     1.7 +<!--
     1.8 +https://bugzilla.mozilla.org/show_bug.cgi?id=996069
     1.9 +-->
    1.10 +<window title="Mozilla Bug 996069"
    1.11 +        xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul">
    1.12 +  <script type="application/javascript" src="chrome://mochikit/content/tests/SimpleTest/SimpleTest.js"/>
    1.13 +
    1.14 +  <!-- test results are displayed in the html:body -->
    1.15 +  <body xmlns="http://www.w3.org/1999/xhtml">
    1.16 +  <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=996069"
    1.17 +     target="_blank">Mozilla Bug 996069</a>
    1.18 +  </body>
    1.19 +
    1.20 +  <!-- test code goes here -->
    1.21 +  <script type="application/javascript">
    1.22 +  <![CDATA[
    1.23 +  const Cu = Components.utils;
    1.24 +  /** Test for Bug 996069 **/
    1.25 +  SimpleTest.waitForExplicitFinish();
    1.26 +
    1.27 +  function loaded() {
    1.28 +    var ifr = document.getElementById("ifr").contentWindow;
    1.29 +    var sb = new Cu.Sandbox([ifr],
    1.30 +                            { sandboxPrototype: ifr });
    1.31 +
    1.32 +    ifr.wrappedJSObject.finishTest = function() {
    1.33 +      // If we got here we did not hit the NS_ReleaseAssert...
    1.34 +      ok(true, "nsExpandedPrincipal should not be inherited by content windows");
    1.35 +
    1.36 +      // But let's be sure that the new window does not have nsEP
    1.37 +      newWin.wrappedJSObject.obj = Cu.evalInSandbox("var obj = { foo: 'bar' }; obj", sb);
    1.38 +      try {
    1.39 +        newWin.eval("obj.foo");
    1.40 +        ok(false, "newWin should not have access to object from a scope with nsExpandedPrincipal");
    1.41 +      } catch (e) {
    1.42 +        ok(/Permission denied/.exec(e.message), "newWin should not have access to object from a scope with nsExpandedPrincipal");
    1.43 +      }
    1.44 +      newWin.close();
    1.45 +      SimpleTest.finish();
    1.46 +    };
    1.47 +
    1.48 +    var newWin = Cu.evalInSandbox(
    1.49 +      "window.open('http://example.org/chrome/js/xpconnect/tests/chrome/file_bug996069.html');",
    1.50 +      sb);
    1.51 +  }
    1.52 +
    1.53 +  ]]>
    1.54 +  </script>
    1.55 +  <iframe id="ifr" onload="loaded();" type="content" src="http://example.org/chrome/js/xpconnect/tests/chrome/file_bug996069.html" />
    1.56 +</window>

mercurial