Andrew McCreight
84fc31638e
This actor property defaults to false. If it is set to false, and the preference dom.jsipc.check_safeForUntrustedWebProcess is set to true, then the actor cannot be loaded into a web or file process. The idea is that if an actor can be put in a process that can contain web content, then it is be a potential vector for a sandbox escape, so you should have to opt-in to that behavior. In addition to adding some tests for this behavior, this patch also adds the safeForUntrustedWebProcess property to the test actors TestWindow and TestProcessActor in dom/ipc/tests/. The properties are added to actors in earlier patches because the new tests that flip the pref to true will fail otherwise. In other words, those tests serve as a basic smoke test for the browser working when the pref is true. Differential Revision: https://phabricator.services.mozilla.com/D302128
82 lines
2.2 KiB
JavaScript
82 lines
2.2 KiB
JavaScript
/* Any copyright is dedicated to the Public Domain.
|
|
http://creativecommons.org/publicdomain/zero/1.0/ */
|
|
|
|
/**
|
|
* Provide infrastructure for JSWindowActor tests.
|
|
*/
|
|
|
|
const URL = "about:blank";
|
|
const TEST_URL = "http://test2.example.org/";
|
|
let windowActorOptions = {
|
|
parent: {
|
|
esModuleURI: "resource://testing-common/TestWindowParent.sys.mjs",
|
|
},
|
|
child: {
|
|
esModuleURI: "resource://testing-common/TestWindowChild.sys.mjs",
|
|
},
|
|
};
|
|
|
|
function declTest(name, cfg) {
|
|
let {
|
|
url = "about:blank",
|
|
allFrames = false,
|
|
includeChrome = false,
|
|
matches,
|
|
remoteTypes,
|
|
safeForUntrustedWebProcess = true,
|
|
safeForUntrustedWebProcessPref = undefined,
|
|
messageManagerGroups,
|
|
events,
|
|
observers,
|
|
test,
|
|
} = cfg;
|
|
|
|
// Build the actor options object which will be used to register & unregister
|
|
// our window actor.
|
|
let actorOptions = {
|
|
parent: { ...windowActorOptions.parent },
|
|
child: { ...windowActorOptions.child, events, observers },
|
|
};
|
|
actorOptions.allFrames = allFrames;
|
|
actorOptions.includeChrome = includeChrome;
|
|
if (matches !== undefined) {
|
|
actorOptions.matches = matches;
|
|
}
|
|
if (remoteTypes !== undefined) {
|
|
actorOptions.remoteTypes = remoteTypes;
|
|
}
|
|
actorOptions.safeForUntrustedWebProcess = safeForUntrustedWebProcess;
|
|
if (messageManagerGroups !== undefined) {
|
|
actorOptions.messageManagerGroups = messageManagerGroups;
|
|
}
|
|
|
|
// Add a new task for the actor test declared here.
|
|
add_task(async function () {
|
|
info("Entering test: " + name);
|
|
|
|
if (safeForUntrustedWebProcessPref !== undefined) {
|
|
await SpecialPowers.pushPrefEnv({
|
|
set: [
|
|
[
|
|
"dom.jsipc.check_safeForUntrustedWebProcess",
|
|
safeForUntrustedWebProcessPref,
|
|
],
|
|
],
|
|
});
|
|
}
|
|
|
|
// Register our actor, and load a new tab with the relevant URL
|
|
ChromeUtils.registerWindowActor("TestWindow", actorOptions);
|
|
try {
|
|
await BrowserTestUtils.withNewTab(url, async browser => {
|
|
info("browser ready");
|
|
await Promise.resolve(test(browser, window));
|
|
});
|
|
} finally {
|
|
// Unregister the actor after the test is complete.
|
|
ChromeUtils.unregisterWindowActor("TestWindow");
|
|
info("Exiting test: " + name);
|
|
}
|
|
});
|
|
}
|