The Tor Browser / file diff

     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/netwerk/test/unit/test_referrer.js	Wed Dec 31 06:09:35 2014 +0100
     1.3 @@ -0,0 +1,76 @@
     1.4 +var ios = Cc["@mozilla.org/network/io-service;1"].
     1.5 +    getService(Ci.nsIIOService);
     1.6 +
     1.7 +function getTestReferrer(server_uri, referer_uri) {
     1.8 +  var chan = ios.newChannel(server_uri, "", null);
     1.9 +  chan.QueryInterface(Components.interfaces.nsIHttpChannel);
    1.10 +  chan.referrer = ios.newURI(referer_uri, null, null);
    1.11 +  var header = null;
    1.12 +  try {
    1.13 +    header = chan.getRequestHeader("Referer");
    1.14 +  }
    1.15 +  catch (NS_ERROR_NOT_AVAILABLE) {}
    1.16 +  return header;
    1.17 +}
    1.18 +
    1.19 +function run_test() {
    1.20 +  var prefs = Cc["@mozilla.org/preferences-service;1"]
    1.21 +                .getService(Components.interfaces.nsIPrefBranch);
    1.22 +
    1.23 +  var server_uri = "http://bar.examplesite.com/path2";
    1.24 +  var server_uri_2 = "http://bar.example.com/anotherpath";
    1.25 +  var referer_uri = "http://foo.example.com/path";
    1.26 +  var referer_uri_2 = "http://bar.examplesite.com/path3?q=blah";
    1.27 +  var referer_uri_2_anchor = "http://bar.examplesite.com/path3?q=blah#anchor";
    1.28 +
    1.29 +  // for https tests
    1.30 +  var server_uri_https = "https://bar.example.com/anotherpath";
    1.31 +  var referer_uri_https = "https://bar.example.com/path3?q=blah";
    1.32 +
    1.33 +  // tests for sendRefererHeader
    1.34 +  prefs.setIntPref("network.http.sendRefererHeader", 0);
    1.35 +  do_check_null(getTestReferrer(server_uri, referer_uri));
    1.36 +  prefs.setIntPref("network.http.sendRefererHeader", 2);
    1.37 +  do_check_eq(getTestReferrer(server_uri, referer_uri), referer_uri);
    1.38 +
    1.39 +  // test that https ref is not sent to http
    1.40 +  do_check_null(getTestReferrer(server_uri_2, referer_uri_https));
    1.41 +
    1.42 +  // tests for referer.spoofSource
    1.43 +  prefs.setBoolPref("network.http.referer.spoofSource", true);
    1.44 +  do_check_eq(getTestReferrer(server_uri, referer_uri), server_uri);
    1.45 +  prefs.setBoolPref("network.http.referer.spoofSource", false);
    1.46 +  do_check_eq(getTestReferrer(server_uri, referer_uri), referer_uri);
    1.47 +
    1.48 +  // tests for referer.XOriginPolicy
    1.49 +  prefs.setIntPref("network.http.referer.XOriginPolicy", 2);
    1.50 +  do_check_null(getTestReferrer(server_uri_2, referer_uri));
    1.51 +  do_check_eq(getTestReferrer(server_uri, referer_uri_2), referer_uri_2);
    1.52 +  prefs.setIntPref("network.http.referer.XOriginPolicy", 1);
    1.53 +  do_check_eq(getTestReferrer(server_uri_2, referer_uri), referer_uri);
    1.54 +  do_check_null(getTestReferrer(server_uri, referer_uri));
    1.55 +  // https test
    1.56 +  do_check_eq(getTestReferrer(server_uri_https, referer_uri_https), referer_uri_https);
    1.57 +  prefs.setIntPref("network.http.referer.XOriginPolicy", 0);
    1.58 +  do_check_eq(getTestReferrer(server_uri, referer_uri), referer_uri);
    1.59 +
    1.60 +  // tests for referer.trimmingPolicy
    1.61 +  prefs.setIntPref("network.http.referer.trimmingPolicy", 1);
    1.62 +  do_check_eq(getTestReferrer(server_uri, referer_uri_2), "http://bar.examplesite.com/path3");
    1.63 +  prefs.setIntPref("network.http.referer.trimmingPolicy", 2);
    1.64 +  do_check_eq(getTestReferrer(server_uri, referer_uri_2), "http://bar.examplesite.com");
    1.65 +  // https test
    1.66 +  do_check_eq(getTestReferrer(server_uri_https, referer_uri_https), "https://bar.example.com");
    1.67 +  prefs.setIntPref("network.http.referer.trimmingPolicy", 0);
    1.68 +  // test that anchor is lopped off in ordinary case
    1.69 +  do_check_eq(getTestReferrer(server_uri, referer_uri_2_anchor), referer_uri_2);
    1.70 +
    1.71 +  // combination test: send spoofed path-only when hosts match
    1.72 +  var combo_referer_uri = "http://blah.foo.com/path?q=hot";
    1.73 +  var dest_uri = "http://blah.foo.com:9999/spoofedpath?q=bad";
    1.74 +  prefs.setIntPref("network.http.referer.trimmingPolicy", 1);
    1.75 +  prefs.setBoolPref("network.http.referer.spoofSource", true);
    1.76 +  prefs.setIntPref("network.http.referer.XOriginPolicy", 2);
    1.77 +  do_check_eq(getTestReferrer(dest_uri, combo_referer_uri), "http://blah.foo.com:9999/spoofedpath");
    1.78 +  do_check_null(getTestReferrer(dest_uri, "http://gah.foo.com/anotherpath"));
    1.79 +}