"use strict";
const SIMPLE_HTML = "data:text/html,";
/**
* Returns the directory where the chrome.manifest file for the test can be found.
*
* @return nsIFile of the manifest directory
*/
function getManifestDir() {
let path = getTestFilePath("browser_docshell_type_editor");
let file = Cc["@mozilla.org/file/local;1"].createInstance(Ci.nsIFile);
file.initWithPath(path);
return file;
}
// The following URI is *not* accessible to content, hence loading that URI
// from an unprivileged site should be blocked. If docshell is of appType
// APP_TYPE_EDITOR however the load should be allowed.
// >> chrome://test1/skin/privileged.png
add_task(async function () {
info("docshell of appType APP_TYPE_EDITOR can access privileged images.");
// Load a temporary manifest adding a route to a privileged image
let manifestDir = getManifestDir();
Components.manager.addBootstrappedManifestLocation(manifestDir);
await BrowserTestUtils.withNewTab(
{
gBrowser,
url: SIMPLE_HTML,
},
async function (browser) {
await SpecialPowers.spawn(browser, [], async function () {
let rootDocShell = docShell.sameTypeRootTreeItem.QueryInterface(
Ci.nsIDocShell
);
let defaultAppType = rootDocShell.appType;
rootDocShell.appType = Ci.nsIDocShell.APP_TYPE_EDITOR;
is(
rootDocShell.appType,
Ci.nsIDocShell.APP_TYPE_EDITOR,
"sanity check: appType after update should be type editor"
);
return new Promise(resolve => {
let doc = content.document;
let image = doc.createElement("img");
image.onload = function () {
ok(true, "APP_TYPE_EDITOR is allowed to load privileged image");
// restore appType of rootDocShell before moving on to the next test
rootDocShell.appType = defaultAppType;
resolve();
};
image.onerror = function () {
ok(false, "APP_TYPE_EDITOR is allowed to load privileged image");
// restore appType of rootDocShell before moving on to the next test
rootDocShell.appType = defaultAppType;
resolve();
};
doc.body.appendChild(image);
image.src = "chrome://test1/skin/privileged.png";
});
});
}
);
Components.manager.removeBootstrappedManifestLocation(manifestDir);
});
add_task(async function () {
info(
"docshell of appType APP_TYPE_UNKNOWN can *not* access privileged images."
);
// Load a temporary manifest adding a route to a privileged image
let manifestDir = getManifestDir();
Components.manager.addBootstrappedManifestLocation(manifestDir);
await BrowserTestUtils.withNewTab(
{
gBrowser,
url: SIMPLE_HTML,
},
async function (browser) {
await SpecialPowers.spawn(browser, [], async function () {
let rootDocShell = docShell.sameTypeRootTreeItem.QueryInterface(
Ci.nsIDocShell
);
let defaultAppType = rootDocShell.appType;
rootDocShell.appType = Ci.nsIDocShell.APP_TYPE_UNKNOWN;
is(
rootDocShell.appType,
Ci.nsIDocShell.APP_TYPE_UNKNOWN,
"sanity check: appType of docshell should be unknown"
);
return new Promise(resolve => {
let doc = content.document;
let image = doc.createElement("img");
image.onload = function () {
ok(
false,
"APP_TYPE_UNKNOWN is *not* allowed to access privileged image"
);
// restore appType of rootDocShell before moving on to the next test
rootDocShell.appType = defaultAppType;
resolve();
};
image.onerror = function () {
ok(
true,
"APP_TYPE_UNKNOWN is *not* allowed to access privileged image"
);
// restore appType of rootDocShell before moving on to the next test
rootDocShell.appType = defaultAppType;
resolve();
};
doc.body.appendChild(image);
// Set the src via wrappedJSObject so the load is triggered with
// the content page's principal rather than ours.
image.wrappedJSObject.src = "chrome://test1/skin/privileged.png";
});
});
}
);
Components.manager.removeBootstrappedManifestLocation(manifestDir);
});