Files
sousa-gecko/dom/base/test/test_bug1268962.html
T
acreskeyMoz aa0f14678b Bug 2050993 - Only fire the prefetch load event from cache when the channel succeeded. r=necko-reviewers,valentin
The IsFromCache branch in nsPrefetchNode::OnStartRequest forced the load event
unconditionally, overriding the tainting-based decision. Only force it when the
channel status is success, so a failed CORS check still fires error.

Differential Revision: https://phabricator.services.mozilla.com/D309369
2026-06-30 15:44:28 +00:00

124 lines
5.6 KiB
HTML

<!DOCTYPE HTML>
<html>
<!--
https://bugzilla.mozilla.org/show_bug.cgi?id=1268962
-->
<head>
<title>Test for Bug 1268962</title>
<script src="/tests/SimpleTest/SimpleTest.js"></script>
<link rel="stylesheet" type="text/css" href="/tests/SimpleTest/test.css" />
</head>
<body>
<a target="_blank" href="https://bugzilla.mozilla.org/show_bug.cgi?id=1268962">Mozilla Bug 1268962</a>
<p id="display"></p>
<div id="content" style="display: none"></div>
<script class="testbody" type="text/javascript">
/** Test for Bug 1268962 */
function testPrefetchEvent(url, crossorigin, expectLoad) {
return new Promise((resolve) => {
var link = document.createElement("LINK");
link.setAttribute("rel", "prefetch");
link.setAttribute("href", url);
if (crossorigin) {
link.setAttribute("crossorigin", "");
}
link.addEventListener("load", () => {
ok(expectLoad, "not expecting load event for " + url);
link.remove();
resolve();
});
link.addEventListener("error", () => {
ok(!expectLoad, "not expecting error event for " + url);
link.remove();
resolve();
});
document.head.appendChild(link);
});
}
function testCancelPrefetchNotCrash(url) {
var ios = SpecialPowers.Cc["@mozilla.org/network/io-service;1"].
getService(SpecialPowers.Ci.nsIIOService);
var prefetch = SpecialPowers.Cc["@mozilla.org/prefetch-service;1"].
getService(SpecialPowers.Ci.nsIPrefetchService);
var link = document.createElement("LINK");
link.setAttribute("rel", "prefetch");
link.setAttribute("href", url);
document.head.appendChild(link);
// Not actually verifying any value, just to ensure cancelPrefetchPreload
// won't cause crash.
prefetch.cancelPrefetchPreloadURI(ios.newURI(url), link);
}
let gCacheBuster = 0;
// A CORS-mode prefetch served from cache whose CORS check fails must fire error,
// not load. The first prefetch caches the 200 response (the CORS failure does
// not doom the entry); the second is served from that cache entry.
async function testCachedCorsFailureFiresError() {
const id = gCacheBuster++;
const url = CROSS_ORIGIN + "?statusCode=200&cacheControl=max-age%3D120" +
"&cachedCors=" + id;
await testPrefetchEvent(url, true, false);
await testPrefetchEvent(url, true, false);
const count = await fetch(CROSS_ORIGIN + "?getCount=" + id).then(r => r.text());
is(count, "1", "second prefetch should be served from cache, not refetched");
}
const SJS_PATH = window.location.pathname.replace(/[^/]+$/, "file_bug1268962.sjs");
const SAME_ORIGIN = "http://mochi.test:8888" + SJS_PATH;
const CROSS_ORIGIN = "http://example.com" + SJS_PATH;
SimpleTest.waitForExplicitFinish();
SpecialPowers.pushPrefEnv({"set": [["network.prefetch-next.aggressive", true]]})
// test same origin
.then(() => testPrefetchEvent(SAME_ORIGIN + "?statusCode=200&cacheControl=no-cache", false, false))
.then(() => testPrefetchEvent(SAME_ORIGIN + "?statusCode=404&cacheControl=no-cache", false, false))
.then(() => testPrefetchEvent(SAME_ORIGIN + "?statusCode=200&cacheControl=max-age%3D120", false, true))
.then(() => testPrefetchEvent(SAME_ORIGIN + "?statusCode=404&cacheControl=max-age%3D120", false, false))
// test cross origin without CORS
.then(() => testPrefetchEvent(CROSS_ORIGIN + "?statusCode=200&cacheControl=no-cache", false, true))
.then(() => testPrefetchEvent(CROSS_ORIGIN + "?statusCode=404&cacheControl=no-cache", false, true))
.then(() => testPrefetchEvent(CROSS_ORIGIN + "?statusCode=200&cacheControl=max-age%3D120", false, true))
.then(() => testPrefetchEvent(CROSS_ORIGIN + "?statusCode=404&cacheControl=max-age%3D120", false, true))
// test cross origin by redirection without CORS
.then(() => testPrefetchEvent(SAME_ORIGIN + "?redirect=crossorigin&statusCode=200&cacheControl=no-cache", false, true))
.then(() => testPrefetchEvent(SAME_ORIGIN + "?redirect=crossorigin&statusCode=404&cacheControl=no-cache", false, true))
.then(() => testPrefetchEvent(SAME_ORIGIN + "?redirect=crossorigin&statusCode=200&cacheControl=max-age%3D120", false, true))
.then(() => testPrefetchEvent(SAME_ORIGIN + "?redirect=crossorigin&statusCode=404&cacheControl=max-age%3D120", false, true))
// test cross origin with CORS request but no CORS response: the CORS check
// fails, which is a network error, so the error event fires
.then(() => testPrefetchEvent(CROSS_ORIGIN + "?statusCode=200&cacheControl=no-cache", true, false))
.then(() => testPrefetchEvent(CROSS_ORIGIN + "?statusCode=404&cacheControl=no-cache", true, false))
.then(() => testPrefetchEvent(CROSS_ORIGIN + "?statusCode=200&cacheControl=max-age%3D120", true, false))
.then(() => testPrefetchEvent(CROSS_ORIGIN + "?statusCode=404&cacheControl=max-age%3D120", true, false))
// test cross origin with CORS request and CORS response
.then(() => testPrefetchEvent(CROSS_ORIGIN + "?statusCode=200&cacheControl=no-cache&allowOrigin=*", true, false))
.then(() => testPrefetchEvent(CROSS_ORIGIN + "?statusCode=404&cacheControl=no-cache&allowOrigin=*", true, false))
.then(() => testPrefetchEvent(CROSS_ORIGIN + "?statusCode=200&cacheControl=max-age%3D120&allowOrigin=*", true, true))
.then(() => testPrefetchEvent(CROSS_ORIGIN + "?statusCode=404&cacheControl=max-age%3D120&allowOrigin=*", true, false))
// test that a cached CORS-mode failure fires error, not load
.then(() => testCachedCorsFailureFiresError())
// test the crash issue: https://bugzilla.mozilla.org/show_bug.cgi?id=1294159
.then(() => testCancelPrefetchNotCrash(SAME_ORIGIN + "?statusCode=200&cacheControl=max-age%3D120"))
.catch((err) => ok(false, "promise rejected: " + err))
.then(() => SimpleTest.finish());
</script>
</body>
</html>