summaryrefslogtreecommitdiffstats
path: root/toolkit/components/thumbnails/test/browser_thumbnails_privacy.js
blob: 84c7010418801c15fd4df249defdd04c3a3100b5 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
/* Any copyright is dedicated to the Public Domain.
   http://creativecommons.org/publicdomain/zero/1.0/ */

const PREF_DISK_CACHE_SSL = "browser.cache.disk_cache_ssl";
const URL =
  "://example.com/browser/toolkit/components/thumbnails/" +
  "test/privacy_cache_control.sjs";

add_task(async function thumbnails_privacy() {
  registerCleanupFunction(function() {
    Services.prefs.clearUserPref(PREF_DISK_CACHE_SSL);
  });

  let positive = [
    // A normal HTTP page without any Cache-Control header.
    { scheme: "http", cacheControl: null, diskCacheSSL: false },

    // A normal HTTP page with 'Cache-Control: private'.
    { scheme: "http", cacheControl: "private", diskCacheSSL: false },

    // Capture HTTPS pages if browser.cache.disk_cache_ssl == true.
    { scheme: "https", cacheControl: null, diskCacheSSL: true },
    { scheme: "https", cacheControl: "public", diskCacheSSL: true },
    { scheme: "https", cacheControl: "private", diskCacheSSL: true },
  ];

  let negative = [
    // Never capture pages with 'Cache-Control: no-store'.
    { scheme: "http", cacheControl: "no-store", diskCacheSSL: false },
    { scheme: "http", cacheControl: "no-store", diskCacheSSL: true },
    { scheme: "https", cacheControl: "no-store", diskCacheSSL: false },
    { scheme: "https", cacheControl: "no-store", diskCacheSSL: true },

    // Don't capture HTTPS pages by default.
    { scheme: "https", cacheControl: null, diskCacheSSL: false },
    { scheme: "https", cacheControl: "public", diskCacheSSL: false },
    { scheme: "https", cacheControl: "private", diskCacheSSL: false },
  ];

  await checkCombinations(positive, true);
  await checkCombinations(negative, false);
});

async function checkCombinations(aCombinations, aResult) {
  for (let combination of aCombinations) {
    let url = combination.scheme + URL;
    if (combination.cacheControl) {
      url += "?" + combination.cacheControl;
    }

    await SpecialPowers.pushPrefEnv({
      set: [[PREF_DISK_CACHE_SSL, combination.diskCacheSSL]],
    });

    // Add the test page as a top link so it has a chance to be thumbnailed
    await promiseAddVisitsAndRepopulateNewTabLinks(url);

    await BrowserTestUtils.withNewTab(
      {
        gBrowser,
        url,
      },
      async browser => {
        let msg = JSON.stringify(combination) + " == " + aResult;
        let aIsSafeSite = await PageThumbs.shouldStoreThumbnail(browser);
        Assert.equal(aIsSafeSite, aResult, msg);
      }
    );

    await SpecialPowers.popPrefEnv();
  }
}