summaryrefslogtreecommitdiffstats
path: root/dom/websocket/tests/test_websocket_mixed_content.html
blob: a4f1d169f283eea4c572b96a7873d5f4d5ce6850 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
<!DOCTYPE HTML>
<html>
<head>
  <meta http-equiv="Content-Type" content="text/html;charset=UTF-8"></meta>
  <title>WebSocket mixed content tests - load secure and insecure websockets</title>
  <script src="/tests/SimpleTest/SimpleTest.js"></script>

  <script type="text/javascript" src="websocket_helpers.js"></script>
  <link rel="stylesheet" type="text/css" href="/tests/SimpleTest/test.css" />
</head>
<body>
<div id="container"></div>
<iframe id="frame" sandbox="allow-scripts"></iframe>
<script class="testbody" type="text/javascript">

let iFrameTests = [testWebSocketSecure, testWebSocketInsecure, testWebSocketInsecureDataURI, testSameOriginSandboxInsecure, testSameOriginSandboxSecure, testCrossOriginSandboxInsecure, testCrossOriginSandboxSecure];

function nextIFrameTest() {
  if(!iFrameTests.length) {
    document.getElementById("frame").removeAttribute("src");
    document.getElementById("frame").remove();
    SimpleTest.finish();
  }
  else {
    let test = iFrameTests.shift();
    test();
  }
}

function testWebSockets () {
  nextIFrameTest();
}

function testWebSocketSecure () {
  let ws = CreateTestWS("wss://example.com/tests/dom/websocket/tests/file_websocket_hello");
  ws.onopen = function(e) {
    ws.send("data");
  }
  ws.onmessage = function(e) {
    is(e.data, "Hello world!", "Wrong data");
    ws.close();
    nextIFrameTest();
  }
}

// Negative test: this should fail as the page was loaded over https
function testWebSocketInsecure () {
  try {
    let ws = new WebSocket("ws://mochi.test:8888/tests/dom/websocket/tests/file_websocket_hello");
    ok(false, "Should throw DOMException");
  } catch (e) {
    ok(e instanceof DOMException, "DOMException thrown ");
    nextIFrameTest();
  }
}

// Negative test: this should fail as the page was loaded over https
function testWebSocketInsecureDataURI() {
  document.getElementById("frame").src = "https://example.com/tests/dom/websocket/tests/iframe_webworker_wss.html";
  onmessage = function(e) {
    is(e.data, "SecurityError: The operation is insecure.", "SecurityError received");
    nextIFrameTest();
  }
}

// Negative test: this should fail as the page was loaded over https
function testSameOriginSandboxInsecure() {
  document.getElementById("frame").src = "https://example.com/tests/dom/websocket/tests/iframe_websocket_wss.html?insecure";
  onmessage = function(e) {
    is(e.data, "SecurityError", "ws://URI cannot be used when loaded over https");
    nextIFrameTest();
  }
}

function testSameOriginSandboxSecure() {
  document.getElementById("frame").src = "https://example.com/tests/dom/websocket/tests/iframe_websocket_wss.html"
  onmessage = function(e) {
    is(e.data, "WS onopen", "wss://URI opened");
    nextIFrameTest();
  }
}

// Negative test: this should fail as the page was loaded over https
function testCrossOriginSandboxInsecure() {
  document.getElementById("frame").src = "https://example.org/tests/dom/websocket/tests/iframe_websocket_wss.html?insecure";
  onmessage = function(e) {
    is(e.data, "SecurityError", "ws://URI cannot be used when loaded over https");
    nextIFrameTest();
  }
}

function testCrossOriginSandboxSecure() {
  document.getElementById("frame").src = "https://example.org/tests/dom/websocket/tests/iframe_websocket_wss.html"

  onmessage = function(e) {
    is(e.data, "WS onopen", "wss://URI opened");
    nextIFrameTest();
  }
}

SimpleTest.waitForExplicitFinish();
testWebSockets();
</script>
</body>
</html>