1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
|
/* -*- Mode: JavaScript; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
/* vim: set ts=8 sts=2 et sw=2 tw=80: */
/* This Source Code Form is subject to the terms of the Mozilla Public
* License, v. 2.0. If a copy of the MPL was not distributed with this
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
"use strict";
const kBaseUrlForContent = getRootDirectory(gTestPath).replace(
"chrome://mochitests/content",
"https://example.com"
);
const kContentFileName = "simple_navigator_clipboard_keydown.html";
const kContentFileUrl = kBaseUrlForContent + kContentFileName;
const kApzTestNativeEventUtilsUrl =
"chrome://mochitests/content/browser/gfx/layers/apz/test/mochitest/apz_test_native_event_utils.js";
Services.scriptloader.loadSubScript(kApzTestNativeEventUtilsUrl, this);
add_setup(async function () {
await SpecialPowers.pushPrefEnv({
set: [["dom.events.asyncClipboard.readText", true]],
});
});
add_task(async function test_paste_button_clickjacking() {
await BrowserTestUtils.withNewTab(kContentFileUrl, async function (browser) {
const pasteButtonIsShown = promisePasteButtonIsShown();
// synthesize key to trigger readText() to bring up paste popup.
EventUtils.synthesizeKey("p", {}, window);
await waitForPasteMenuPopupEvent("shown");
const pastePopup = document.getElementById(kPasteMenuPopupId);
const pasteButton = document.getElementById(kPasteMenuItemId);
ok(
pasteButton.disabled,
"Paste button should be shown with disabled by default"
);
let accesskey = pasteButton.getAttribute("accesskey");
let delay = Services.prefs.getIntPref("security.dialog_enable_delay") * 3;
while (delay > 0) {
// There's no other way to allow some time to pass and ensure we're
// genuinely testing that these keypresses postpone the enabling of
// the paste button, so disable this check for this line:
// eslint-disable-next-line mozilla/no-arbitrary-setTimeout
await new Promise(r => setTimeout(r, 100));
ok(pasteButton.disabled, "Paste button should still be disabled");
EventUtils.synthesizeKey(accesskey, {}, window);
is(pastePopup.state, "open", "Paste popup should still be opened");
delay = delay - 100;
}
await BrowserTestUtils.waitForMutationCondition(
pasteButton,
{ attributeFilter: ["disabled"] },
() => !pasteButton.disabled,
"Wait for paste button enabled"
);
const pasteButtonIsHidden = promisePasteButtonIsHidden();
EventUtils.synthesizeKey(accesskey, {}, window);
await pasteButtonIsHidden;
});
});
|
