1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
|
/* This Source Code Form is subject to the terms of the Mozilla Public
* License, v. 2.0. If a copy of the MPL was not distributed with this
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
/**
* Checks if plugins are enabled in messages correctly or not.
* As of bug 1508942, plugins are no longer enabled in any context.
*/
"use strict";
var { open_content_tab_with_url } = ChromeUtils.import(
"resource://testing-common/mozmill/ContentTabHelpers.jsm"
);
var {
assert_nothing_selected,
assert_selected_and_displayed,
be_in_folder,
close_message_window,
create_folder,
get_about_message,
mc,
open_selected_message,
select_click_row,
select_none,
set_open_message_behavior,
wait_for_message_display_completion,
} = ChromeUtils.import(
"resource://testing-common/mozmill/FolderDisplayHelpers.jsm"
);
var { async_plan_for_new_window } = ChromeUtils.import(
"resource://testing-common/mozmill/WindowHelpers.jsm"
);
var { MailE10SUtils } = ChromeUtils.import(
"resource:///modules/MailE10SUtils.jsm"
);
var folder = null;
var gMsgNo = 0;
var url =
"http://mochi.test:8888/browser/comm/mail/test/browser/content-policy/html/";
// These two constants are used to build the message body.
var msgBody =
'<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">\n' +
"<html>\n" +
"<head>\n" +
"\n" +
'<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">\n' +
"</head>\n" +
'<body bgcolor="#ffffff" text="#000000">\n' +
'<embed id="testelement" type="application/x-test" width="400" height="400" border="1"></embed>\n' +
"</body>\n</html>\n";
add_setup(async function () {
folder = await create_folder("pluginPolicy");
});
function addToFolder(aSubject, aBody, aFolder) {
let msgId = Services.uuid.generateUUID() + "@mozillamessaging.invalid";
let source =
"From - Sat Nov 1 12:39:54 2008\n" +
"X-Mozilla-Status: 0001\n" +
"X-Mozilla-Status2: 00000000\n" +
"Message-ID: <" +
msgId +
">\n" +
"Date: Wed, 11 Jun 2008 20:32:02 -0400\n" +
"From: Tester <tests@mozillamessaging.invalid>\n" +
"User-Agent: Thunderbird 3.0a2pre (Macintosh/2008052122)\n" +
"MIME-Version: 1.0\n" +
"To: recipient@mozillamessaging.invalid\n" +
"Subject: " +
aSubject +
"\n" +
"Content-Type: text/html; charset=ISO-8859-1\n" +
"Content-Transfer-Encoding: 7bit\n" +
"\n" +
aBody +
"\n";
aFolder.QueryInterface(Ci.nsIMsgLocalMailFolder);
aFolder.gettingNewMessages = true;
aFolder.addMessage(source);
aFolder.gettingNewMessages = false;
return aFolder.msgDatabase.getMsgHdrForMessageID(msgId);
}
function isPluginLoaded(browser) {
return SpecialPowers.spawn(browser, [], () => {
let element = content.document.getElementById("testelement");
try {
// if setColor throws, then the plugin isn't running
element.setColor("FFFF0000");
return true;
} catch (ex) {
// Any errors and we'll just return false below - they may be expected.
}
return false;
});
}
async function addMsgToFolderAndCheckContent(loadAllowed) {
let msgDbHdr = addToFolder("Plugin test message " + gMsgNo, msgBody, folder);
// select the newly created message
let msgHdr = select_click_row(gMsgNo);
if (msgDbHdr != msgHdr) {
throw new Error(
"Selected Message Header is not the same as generated header"
);
}
assert_selected_and_displayed(gMsgNo);
++gMsgNo;
// XXX It appears the assert_selected_and_displayed doesn't actually wait
// long enough for plugin load. However, I also can't find a way to wait for
// long enough in all situations, so this will have to do for now.
// eslint-disable-next-line mozilla/no-arbitrary-setTimeout
await new Promise(resolve => setTimeout(resolve, 1000));
// Now check that the content hasn't been loaded
if (
(await isPluginLoaded(
get_about_message().document.getElementById("messagepane")
)) != loadAllowed
) {
throw new Error(
loadAllowed
? "Plugin has been unexpectedly blocked in message content"
: "Plugin has not been blocked in message as expected"
);
}
}
async function checkStandaloneMessageWindow(loadAllowed) {
let newWindowPromise = async_plan_for_new_window("mail:messageWindow");
// Open it
set_open_message_behavior("NEW_WINDOW");
open_selected_message();
let msgc = await newWindowPromise;
wait_for_message_display_completion(msgc, true);
// XXX It appears the wait_for_message_display_completion doesn't actually
// wait long enough for plugin load. However, I also can't find a way to wait
// for long enough in all situations, so this will have to do for now.
// eslint-disable-next-line mozilla/no-arbitrary-setTimeout
await new Promise(resolve => setTimeout(resolve, 1000));
let aboutMessage = get_about_message(msgc.window);
if (
(await isPluginLoaded(
aboutMessage.document.getElementById("messagepane")
)) != loadAllowed
) {
throw new Error(
loadAllowed
? "Plugin has been unexpectedly blocked in standalone window"
: "Plugin has not been blocked in standalone window as expected"
);
}
// Clean up, close the window
close_message_window(msgc);
}
add_task(async function test_3paneWindowDenied() {
await be_in_folder(folder);
assert_nothing_selected();
await addMsgToFolderAndCheckContent(false);
});
add_task(async function test_checkPluginsInNonMessageContent() {
// Deselect everything so we can load our content
select_none();
// load something non-message-like in the message pane
let browser = get_about_message().document.getElementById("messagepane");
MailE10SUtils.loadURI(browser, url + "plugin.html");
await BrowserTestUtils.browserLoaded(browser);
if (await isPluginLoaded(browser)) {
throw new Error(
"Plugin is turned on in content in message pane - it should not be."
);
}
});
add_task(async function test_3paneWindowDeniedAgain() {
select_click_row(0);
assert_selected_and_displayed(0);
let browser = get_about_message().document.getElementById("messagepane");
// Now check that the content hasn't been loaded
if (await isPluginLoaded(browser)) {
throw new Error("Plugin has not been blocked in message as expected");
}
});
add_task(async function test_checkStandaloneMessageWindowDenied() {
await checkStandaloneMessageWindow(false);
});
add_task(async function test_checkContentTab() {
// To open a tab we're going to have to cheat and use tabmail so we can load
// in the data of what we want.
let preCount =
mc.window.document.getElementById("tabmail").tabContainer.allTabs.length;
let newTab = open_content_tab_with_url(url + "plugin.html");
if (await isPluginLoaded(newTab.browser)) {
throw new Error("Plugin has been unexpectedly not blocked in content tab");
}
mc.window.document.getElementById("tabmail").closeTab(newTab);
if (
mc.window.document.getElementById("tabmail").tabContainer.allTabs.length !=
preCount
) {
throw new Error("The content tab didn't close");
}
Assert.report(
false,
undefined,
undefined,
"Test ran to completion successfully"
);
});
|
