1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
|
function run_test() {
var sbMaster = Cu.Sandbox(["http://www.a.com",
"http://www.b.com",
"http://www.d.com"]);
var sbSubset = Cu.Sandbox(["http://www.d.com",
"http://www.a.com"]);
var sbA = Cu.Sandbox("http://www.a.com");
var sbB = Cu.Sandbox("http://www.b.com");
var sbC = Cu.Sandbox("http://www.c.com");
sbMaster.objA = Cu.evalInSandbox("var obj = {prop1:200}; obj", sbA);
sbMaster.objB = Cu.evalInSandbox("var obj = {prop1:200}; obj", sbB);
sbMaster.objC = Cu.evalInSandbox("var obj = {prop1:200}; obj", sbC);
sbMaster.objOwn = Cu.evalInSandbox("var obj = {prop1:200}; obj", sbMaster);
sbMaster.objSubset = Cu.evalInSandbox("var obj = {prop1:200}; obj", sbSubset);
sbA.objMaster = Cu.evalInSandbox("var obj = {prop1:200}; obj", sbMaster);
sbSubset.objMaster = Cu.evalInSandbox("var obj = {prop1:200}; obj", sbMaster);
var ret;
ret = Cu.evalInSandbox("objA.prop1", sbMaster);
Assert.equal(ret, 200);
ret = Cu.evalInSandbox("objB.prop1", sbMaster);
Assert.equal(ret, 200);
ret = Cu.evalInSandbox("objSubset.prop1", sbMaster);
Assert.equal(ret, 200);
function evalAndCatch(str, sb) {
try {
ret = Cu.evalInSandbox(str, sb);
Assert.ok(false, "unexpected pass")
} catch (e) {
Assert.ok(e.message && e.message.includes("Permission denied to access property"));
}
}
evalAndCatch("objC.prop1", sbMaster);
evalAndCatch("objMaster.prop1", sbA);
evalAndCatch("objMaster.prop1", sbSubset);
}
|
