function checkThrows(fn) {
  try {
    fn();
    ok(false, "Should have thrown");
  } catch (e) {
    ok(/denied|insecure|prohibited/.test(e));
  }
}

function run_test() {
  var xosb = new Cu.Sandbox('http://www.example.org');
  var sb = new Cu.Sandbox('http://www.example.com');
  sb.ok = ok;
  sb.fun = function() { ok(false, "Shouldn't ever reach me"); };
  sb.cow = { foopy: 2, __exposedProps__: { foopy: 'rw' } };
  sb.payload = Cu.evalInSandbox('new Object()', xosb);
  Cu.evalInSandbox(checkThrows.toSource(), sb);
  Cu.evalInSandbox('checkThrows(function() { fun(payload); });', sb);
  Cu.evalInSandbox('checkThrows(function() { Function.prototype.call.call(fun, payload); });', sb);
  Cu.evalInSandbox('checkThrows(function() { Function.prototype.call.call(fun, null, payload); });', sb);
  Cu.evalInSandbox('checkThrows(function() { new fun(payload); });', sb);
  Cu.evalInSandbox('checkThrows(function() { cow.foopy = payload; });', sb);
  Cu.evalInSandbox('checkThrows(function() { Object.defineProperty(cow, "foopy", { value: payload }); });', sb);
  // These fail for a different reason, .bind can't access the length/name property on the function.
  Cu.evalInSandbox('checkThrows(function() { Function.bind.call(fun, null, payload); });', sb);
  Cu.evalInSandbox('checkThrows(function() { Function.bind.call(fun, payload); });', sb);
}