Alexandre Poirot
f9c72a3393
This better replicate a web page as they aren't using system principal. This will help landing the following revision where the DevToolsServer will now be running in the shared privileged global and can no longer debug globals in that shared global. Differential Revision: https://phabricator.services.mozilla.com/D252529
55 lines
1.6 KiB
JavaScript
55 lines
1.6 KiB
JavaScript
/* eslint-disable strict */
|
|
function run_test() {
|
|
Services.prefs.setBoolPref("security.allow_eval_with_system_principal", true);
|
|
registerCleanupFunction(() => {
|
|
Services.prefs.clearUserPref("security.allow_eval_with_system_principal");
|
|
});
|
|
const { addDebuggerToGlobal } = ChromeUtils.importESModule(
|
|
"resource://gre/modules/jsdebugger.sys.mjs"
|
|
);
|
|
addDebuggerToGlobal(globalThis);
|
|
const g = createTestGlobal("test", {
|
|
chrome: true,
|
|
});
|
|
const dbg = new Debugger();
|
|
const gw = dbg.addDebuggee(g);
|
|
|
|
g.eval(`
|
|
// This is not a CCW.
|
|
Object.defineProperty(this, "bar", {
|
|
get: function() { return "bar"; },
|
|
configurable: true,
|
|
enumerable: true
|
|
});
|
|
|
|
const { XPCOMUtils } = ChromeUtils.importESModule(
|
|
"resource://gre/modules/XPCOMUtils.sys.mjs"
|
|
);
|
|
|
|
// This is a CCW.
|
|
XPCOMUtils.defineLazyScriptGetter(
|
|
this, "foo", "chrome://global/content/viewZoomOverlay.js");
|
|
`);
|
|
|
|
// Neither scripted getter should be considered safe.
|
|
assert(!DevToolsUtils.hasSafeGetter(gw.getOwnPropertyDescriptor("bar")));
|
|
assert(!DevToolsUtils.hasSafeGetter(gw.getOwnPropertyDescriptor("foo")));
|
|
|
|
// Create an object in a less privileged sandbox.
|
|
const obj = gw.makeDebuggeeValue(
|
|
Cu.waiveXrays(
|
|
Cu.Sandbox(null).eval(`
|
|
Object.defineProperty({}, "bar", {
|
|
get: function() { return "bar"; },
|
|
configurable: true,
|
|
enumerable: true
|
|
});
|
|
`)
|
|
)
|
|
);
|
|
|
|
// After waiving Xrays, the object has 2 wrappers. Both must be removed
|
|
// in order to detect that the getter is not safe.
|
|
assert(!DevToolsUtils.hasSafeGetter(obj.getOwnPropertyDescriptor("bar")));
|
|
}
|