The IsFromCache branch in nsPrefetchNode::OnStartRequest forced the load event unconditionally, overriding the tainting-based decision. Only force it when the channel status is success, so a failed CORS check still fires error. Differential Revision: https://phabricator.services.mozilla.com/D309369
124 lines
5.6 KiB
HTML
124 lines
5.6 KiB
HTML
<!DOCTYPE HTML>
|
|
<html>
|
|
<!--
|
|
https://bugzilla.mozilla.org/show_bug.cgi?id=1268962
|
|
-->
|
|
<head>
|
|
<title>Test for Bug 1268962</title>
|
|
<script src="/tests/SimpleTest/SimpleTest.js"></script>
|
|
<link rel="stylesheet" type="text/css" href="/tests/SimpleTest/test.css" />
|
|
</head>
|
|
<body>
|
|
<a target="_blank" href="https://bugzilla.mozilla.org/show_bug.cgi?id=1268962">Mozilla Bug 1268962</a>
|
|
<p id="display"></p>
|
|
<div id="content" style="display: none"></div>
|
|
<script class="testbody" type="text/javascript">
|
|
|
|
/** Test for Bug 1268962 */
|
|
|
|
function testPrefetchEvent(url, crossorigin, expectLoad) {
|
|
return new Promise((resolve) => {
|
|
var link = document.createElement("LINK");
|
|
link.setAttribute("rel", "prefetch");
|
|
link.setAttribute("href", url);
|
|
if (crossorigin) {
|
|
link.setAttribute("crossorigin", "");
|
|
}
|
|
|
|
link.addEventListener("load", () => {
|
|
ok(expectLoad, "not expecting load event for " + url);
|
|
link.remove();
|
|
resolve();
|
|
});
|
|
link.addEventListener("error", () => {
|
|
ok(!expectLoad, "not expecting error event for " + url);
|
|
link.remove();
|
|
resolve();
|
|
});
|
|
document.head.appendChild(link);
|
|
});
|
|
}
|
|
|
|
function testCancelPrefetchNotCrash(url) {
|
|
var ios = SpecialPowers.Cc["@mozilla.org/network/io-service;1"].
|
|
getService(SpecialPowers.Ci.nsIIOService);
|
|
var prefetch = SpecialPowers.Cc["@mozilla.org/prefetch-service;1"].
|
|
getService(SpecialPowers.Ci.nsIPrefetchService);
|
|
|
|
var link = document.createElement("LINK");
|
|
link.setAttribute("rel", "prefetch");
|
|
link.setAttribute("href", url);
|
|
document.head.appendChild(link);
|
|
|
|
// Not actually verifying any value, just to ensure cancelPrefetchPreload
|
|
// won't cause crash.
|
|
prefetch.cancelPrefetchPreloadURI(ios.newURI(url), link);
|
|
}
|
|
|
|
let gCacheBuster = 0;
|
|
|
|
// A CORS-mode prefetch served from cache whose CORS check fails must fire error,
|
|
// not load. The first prefetch caches the 200 response (the CORS failure does
|
|
// not doom the entry); the second is served from that cache entry.
|
|
async function testCachedCorsFailureFiresError() {
|
|
const id = gCacheBuster++;
|
|
const url = CROSS_ORIGIN + "?statusCode=200&cacheControl=max-age%3D120" +
|
|
"&cachedCors=" + id;
|
|
await testPrefetchEvent(url, true, false);
|
|
await testPrefetchEvent(url, true, false);
|
|
const count = await fetch(CROSS_ORIGIN + "?getCount=" + id).then(r => r.text());
|
|
is(count, "1", "second prefetch should be served from cache, not refetched");
|
|
}
|
|
|
|
const SJS_PATH = window.location.pathname.replace(/[^/]+$/, "file_bug1268962.sjs");
|
|
const SAME_ORIGIN = "http://mochi.test:8888" + SJS_PATH;
|
|
const CROSS_ORIGIN = "http://example.com" + SJS_PATH;
|
|
|
|
SimpleTest.waitForExplicitFinish();
|
|
|
|
SpecialPowers.pushPrefEnv({"set": [["network.prefetch-next.aggressive", true]]})
|
|
|
|
// test same origin
|
|
.then(() => testPrefetchEvent(SAME_ORIGIN + "?statusCode=200&cacheControl=no-cache", false, false))
|
|
.then(() => testPrefetchEvent(SAME_ORIGIN + "?statusCode=404&cacheControl=no-cache", false, false))
|
|
.then(() => testPrefetchEvent(SAME_ORIGIN + "?statusCode=200&cacheControl=max-age%3D120", false, true))
|
|
.then(() => testPrefetchEvent(SAME_ORIGIN + "?statusCode=404&cacheControl=max-age%3D120", false, false))
|
|
|
|
// test cross origin without CORS
|
|
.then(() => testPrefetchEvent(CROSS_ORIGIN + "?statusCode=200&cacheControl=no-cache", false, true))
|
|
.then(() => testPrefetchEvent(CROSS_ORIGIN + "?statusCode=404&cacheControl=no-cache", false, true))
|
|
.then(() => testPrefetchEvent(CROSS_ORIGIN + "?statusCode=200&cacheControl=max-age%3D120", false, true))
|
|
.then(() => testPrefetchEvent(CROSS_ORIGIN + "?statusCode=404&cacheControl=max-age%3D120", false, true))
|
|
|
|
// test cross origin by redirection without CORS
|
|
.then(() => testPrefetchEvent(SAME_ORIGIN + "?redirect=crossorigin&statusCode=200&cacheControl=no-cache", false, true))
|
|
.then(() => testPrefetchEvent(SAME_ORIGIN + "?redirect=crossorigin&statusCode=404&cacheControl=no-cache", false, true))
|
|
.then(() => testPrefetchEvent(SAME_ORIGIN + "?redirect=crossorigin&statusCode=200&cacheControl=max-age%3D120", false, true))
|
|
.then(() => testPrefetchEvent(SAME_ORIGIN + "?redirect=crossorigin&statusCode=404&cacheControl=max-age%3D120", false, true))
|
|
|
|
// test cross origin with CORS request but no CORS response: the CORS check
|
|
// fails, which is a network error, so the error event fires
|
|
.then(() => testPrefetchEvent(CROSS_ORIGIN + "?statusCode=200&cacheControl=no-cache", true, false))
|
|
.then(() => testPrefetchEvent(CROSS_ORIGIN + "?statusCode=404&cacheControl=no-cache", true, false))
|
|
.then(() => testPrefetchEvent(CROSS_ORIGIN + "?statusCode=200&cacheControl=max-age%3D120", true, false))
|
|
.then(() => testPrefetchEvent(CROSS_ORIGIN + "?statusCode=404&cacheControl=max-age%3D120", true, false))
|
|
|
|
// test cross origin with CORS request and CORS response
|
|
.then(() => testPrefetchEvent(CROSS_ORIGIN + "?statusCode=200&cacheControl=no-cache&allowOrigin=*", true, false))
|
|
.then(() => testPrefetchEvent(CROSS_ORIGIN + "?statusCode=404&cacheControl=no-cache&allowOrigin=*", true, false))
|
|
.then(() => testPrefetchEvent(CROSS_ORIGIN + "?statusCode=200&cacheControl=max-age%3D120&allowOrigin=*", true, true))
|
|
.then(() => testPrefetchEvent(CROSS_ORIGIN + "?statusCode=404&cacheControl=max-age%3D120&allowOrigin=*", true, false))
|
|
|
|
// test that a cached CORS-mode failure fires error, not load
|
|
.then(() => testCachedCorsFailureFiresError())
|
|
|
|
// test the crash issue: https://bugzilla.mozilla.org/show_bug.cgi?id=1294159
|
|
.then(() => testCancelPrefetchNotCrash(SAME_ORIGIN + "?statusCode=200&cacheControl=max-age%3D120"))
|
|
|
|
.catch((err) => ok(false, "promise rejected: " + err))
|
|
.then(() => SimpleTest.finish());
|
|
|
|
</script>
|
|
</body>
|
|
</html>
|