1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
|
/* -*- Mode: indent-tabs-mode: nil; js-indent-level: 2 -*- */
/* vim: set sts=2 sw=2 et tw=80: */
"use strict";
add_task(async function testPageActionPopup() {
const BASE =
"http://example.com/browser/browser/components/extensions/test/browser";
let extension = ExtensionTestUtils.loadExtension({
manifest: {
browser_action: {
default_popup: `${BASE}/file_popup_api_injection_a.html`,
default_area: "navbar",
},
page_action: {
default_popup: `${BASE}/file_popup_api_injection_b.html`,
},
},
files: {
"popup-a.html": `<html><head><meta charset="utf-8">
<script type="application/javascript" src="popup-a.js"></script></head></html>`,
"popup-a.js": 'browser.test.sendMessage("from-popup-a");',
"popup-b.html": `<html><head><meta charset="utf-8">
<script type="application/javascript" src="popup-b.js"></script></head></html>`,
"popup-b.js": 'browser.test.sendMessage("from-popup-b");',
},
background: function () {
let tabId;
browser.tabs.query({ active: true, currentWindow: true }, tabs => {
tabId = tabs[0].id;
browser.pageAction.show(tabId).then(() => {
browser.test.sendMessage("ready");
});
});
browser.test.onMessage.addListener(() => {
browser.browserAction.setPopup({ popup: "/popup-a.html" });
browser.pageAction.setPopup({ tabId, popup: "popup-b.html" });
browser.test.sendMessage("ok");
});
},
});
let promiseConsoleMessage = pattern =>
new Promise(resolve => {
Services.console.registerListener(function listener(msg) {
if (pattern.test(msg.message)) {
resolve(msg.message);
Services.console.unregisterListener(listener);
}
});
});
await extension.startup();
await extension.awaitMessage("ready");
// Check that unprivileged documents don't get the API.
// BrowserAction:
let awaitMessage = promiseConsoleMessage(
/WebExt Privilege Escalation: BrowserAction/
);
SimpleTest.expectUncaughtException();
await clickBrowserAction(extension);
await awaitExtensionPanel(extension);
let message = await awaitMessage;
ok(
message.includes(
"WebExt Privilege Escalation: BrowserAction: typeof(browser) = undefined"
),
`No BrowserAction API injection`
);
await closeBrowserAction(extension);
// PageAction
awaitMessage = promiseConsoleMessage(
/WebExt Privilege Escalation: PageAction/
);
SimpleTest.expectUncaughtException();
await clickPageAction(extension);
message = await awaitMessage;
ok(
message.includes(
"WebExt Privilege Escalation: PageAction: typeof(browser) = undefined"
),
`No PageAction API injection: ${message}`
);
await closePageAction(extension);
SimpleTest.expectUncaughtException(false);
// Check that privileged documents *do* get the API.
extension.sendMessage("next");
await extension.awaitMessage("ok");
await clickBrowserAction(extension);
await awaitExtensionPanel(extension);
await extension.awaitMessage("from-popup-a");
await closeBrowserAction(extension);
await clickPageAction(extension);
await extension.awaitMessage("from-popup-b");
await closePageAction(extension);
await extension.unload();
});
|
