1 files changed, 115 insertions, 0 deletions
diff --git a/netwerk/test/unit/test_bug412457.js b/netwerk/test/unit/test_bug412457.js
new file mode 100644
index 0000000000..f32a7a3f17
--- /dev/null
+++ b/netwerk/test/unit/test_bug412457.js
@@ -0,0 +1,115 @@
+"use strict";
+
+function run_test() {
+  // check if hostname is unescaped before applying IDNA
+  var newURI = Services.io.newURI("http://\u5341%2ecom/");
+  Assert.equal(newURI.asciiHost, "xn--kkr.com");
+
+  // escaped UTF8
+  newURI = newURI
+    .mutate()
+    .setSpec("http://%e5%8d%81.com")
+    .finalize();
+  Assert.equal(newURI.asciiHost, "xn--kkr.com");
+
+  // There should be only allowed characters in hostname after
+  // unescaping and attempting to apply IDNA. "\x80" is illegal in
+  // UTF-8, so IDNA fails, and 0x80 is illegal in DNS too.
+  Assert.throws(
+    () => {
+      newURI = newURI
+        .mutate()
+        .setSpec("http://%80.com")
+        .finalize();
+    },
+    /NS_ERROR_MALFORMED_URI/,
+    "illegal UTF character"
+  );
+
+  // test parsing URL with all possible host terminators
+  newURI = newURI
+    .mutate()
+    .setSpec("http://example.com?foo")
+    .finalize();
+  Assert.equal(newURI.asciiHost, "example.com");
+
+  newURI = newURI
+    .mutate()
+    .setSpec("http://example.com#foo")
+    .finalize();
+  Assert.equal(newURI.asciiHost, "example.com");
+
+  newURI = newURI
+    .mutate()
+    .setSpec("http://example.com:80")
+    .finalize();
+  Assert.equal(newURI.asciiHost, "example.com");
+
+  newURI = newURI
+    .mutate()
+    .setSpec("http://example.com/foo")
+    .finalize();
+  Assert.equal(newURI.asciiHost, "example.com");
+
+  // Characters that are invalid in the host
+  Assert.throws(
+    () => {
+      newURI = newURI
+        .mutate()
+        .setSpec("http://example.com%3ffoo")
+        .finalize();
+    },
+    /NS_ERROR_MALFORMED_URI/,
+    "bad escaped character"
+  );
+  Assert.throws(
+    () => {
+      newURI = newURI
+        .mutate()
+        .setSpec("http://example.com%23foo")
+        .finalize();
+    },
+    /NS_ERROR_MALFORMED_URI/,
+    "bad escaped character"
+  );
+  Assert.throws(
+    () => {
+      newURI = newURI
+        .mutate()
+        .setSpec("http://example.com%3bfoo")
+        .finalize();
+    },
+    /NS_ERROR_MALFORMED_URI/,
+    "bad escaped character"
+  );
+  Assert.throws(
+    () => {
+      newURI = newURI
+        .mutate()
+        .setSpec("http://example.com%3a80")
+        .finalize();
+    },
+    /NS_ERROR_MALFORMED_URI/,
+    "bad escaped character"
+  );
+  Assert.throws(
+    () => {
+      newURI = newURI
+        .mutate()
+        .setSpec("http://example.com%2ffoo")
+        .finalize();
+    },
+    /NS_ERROR_MALFORMED_URI/,
+    "bad escaped character"
+  );
+  Assert.throws(
+    () => {
+      newURI = newURI
+        .mutate()
+        .setSpec("http://example.com%00")
+        .finalize();
+    },
+    /NS_ERROR_MALFORMED_URI/,
+    "bad escaped character"
+  );
+}