1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
|
// Server side js file for bug 910139, see file test_bug910139.html for details.
const { NetUtil } = ChromeUtils.import("resource://gre/modules/NetUtil.jsm");
function loadResponseFromFile(path) {
var testHTMLFile = Components.classes["@mozilla.org/file/directory_service;1"]
.getService(Components.interfaces.nsIProperties)
.get("CurWorkD", Components.interfaces.nsIFile);
var dirs = path.split("/");
for (var i = 0; i < dirs.length; i++) {
testHTMLFile.append(dirs[i]);
}
var testHTMLFileStream = Components.classes[
"@mozilla.org/network/file-input-stream;1"
].createInstance(Components.interfaces.nsIFileInputStream);
testHTMLFileStream.init(testHTMLFile, -1, 0, 0);
var testHTML = NetUtil.readInputStreamToString(
testHTMLFileStream,
testHTMLFileStream.available()
);
return testHTML;
}
var policies = [
"default-src 'self'; script-src 'self'", // CSP for checkAllowed
"default-src 'self'; script-src *.example.com", // CSP for checkBlocked
];
function getPolicy() {
var index;
// setState only accepts strings as arguments
if (!getState("counter")) {
index = 0;
setState("counter", index.toString());
} else {
index = parseInt(getState("counter"));
++index;
setState("counter", index.toString());
}
return policies[index];
}
function handleRequest(request, response) {
// avoid confusing cache behaviors
response.setHeader("Cache-Control", "no-cache", false);
// set the required CSP
response.setHeader("Content-Security-Policy", getPolicy(), false);
// return the requested XML file.
response.write(
loadResponseFromFile("tests/dom/security/test/csp/file_bug910139.xml")
);
}
|
