security/manager/ssl/tests/unit/test_sts_holepunch.js@6474c204b198
security/manager/ssl/tests/unit/test_sts_holepunch.js
Wed, 31 Dec 2014 06:09:35 +0100
- author
- Michael Schloh von Bennewitz <michael@schloh.com>
- date
- Wed, 31 Dec 2014 06:09:35 +0100
- changeset 0
- 6474c204b198
- permissions
- -rw-r--r--
Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.
1 /* This Source Code Form is subject to the terms of the Mozilla Public
2 * License, v. 2.0. If a copy of the MPL was not distributed with this
3 * file, You can obtain one at http://mozilla.org/MPL/2.0/.
4 */
5 "use strict";
7 // bug 961528: chart.apis.google.com doesn't handle https. Check that
8 // it isn't considered HSTS (other example.apis.google.com hosts should be
9 // HSTS as long as they're on the preload list, however).
10 function run_test() {
11 let SSService = Cc["@mozilla.org/ssservice;1"]
12 .getService(Ci.nsISiteSecurityService);
13 do_check_false(SSService.isSecureHost(Ci.nsISiteSecurityService.HEADER_HSTS,
14 "chart.apis.google.com", 0));
15 do_check_false(SSService.isSecureHost(Ci.nsISiteSecurityService.HEADER_HSTS,
16 "CHART.APIS.GOOGLE.COM", 0));
17 do_check_false(SSService.isSecureHost(Ci.nsISiteSecurityService.HEADER_HSTS,
18 "sub.chart.apis.google.com", 0));
19 do_check_false(SSService.isSecureHost(Ci.nsISiteSecurityService.HEADER_HSTS,
20 "SUB.CHART.APIS.GOOGLE.COM", 0));
21 do_check_true(SSService.isSecureHost(Ci.nsISiteSecurityService.HEADER_HSTS,
22 "example.apis.google.com", 0));
23 do_check_true(SSService.isSecureHost(Ci.nsISiteSecurityService.HEADER_HSTS,
24 "EXAMPLE.APIS.GOOGLE.COM", 0));
25 do_check_true(SSService.isSecureHost(Ci.nsISiteSecurityService.HEADER_HSTS,
26 "sub.example.apis.google.com", 0));
27 do_check_true(SSService.isSecureHost(Ci.nsISiteSecurityService.HEADER_HSTS,
28 "SUB.EXAMPLE.APIS.GOOGLE.COM", 0));
29 // also check isSecureURI
30 let chartURI = Services.io.newURI("http://chart.apis.google.com", null, null);
31 do_check_false(SSService.isSecureURI(Ci.nsISiteSecurityService.HEADER_HSTS,
32 chartURI, 0));
33 let otherURI = Services.io.newURI("http://other.apis.google.com", null, null);
34 do_check_true(SSService.isSecureURI(Ci.nsISiteSecurityService.HEADER_HSTS,
35 otherURI, 0));
36 }
