111 lines
4.0 KiB
JavaScript
111 lines
4.0 KiB
JavaScript
/* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
|
|
|
|
const { XPCShellContentUtils } = ChromeUtils.importESModule(
|
|
"resource://testing-common/XPCShellContentUtils.sys.mjs"
|
|
);
|
|
XPCShellContentUtils.init(this);
|
|
const server = XPCShellContentUtils.createHttpServer();
|
|
const SERVER_ORIGIN = `http://localhost:${server.identity.primaryPort}`;
|
|
server.registerPathHandler("/isolated_yes", (req, res) => {
|
|
res.setHeader("Cross-Origin-Opener-Policy", "same-origin");
|
|
res.setHeader("Cross-Origin-Embedder-Policy", "require-corp");
|
|
});
|
|
server.registerPathHandler("/isolated_no", (req, res) => {
|
|
// No COOP or COEP headers, implies not cross-origin isolated.
|
|
});
|
|
|
|
add_task(function test_system_sandbox() {
|
|
let sand = Cu.Sandbox(Services.scriptSecurityManager.getSystemPrincipal());
|
|
|
|
equal(
|
|
Cu.evalInSandbox("new SharedArrayBuffer(1).byteLength", sand),
|
|
1,
|
|
"Can use SharedArrayBuffer in system principal"
|
|
);
|
|
});
|
|
|
|
add_task(function test_null_principal_sandbox() {
|
|
let sand = Cu.Sandbox(null);
|
|
equal(
|
|
Cu.evalInSandbox("typeof SharedArrayBuffer", sand),
|
|
"undefined",
|
|
"SharedArrayBuffer unavailable in null principal sandbox"
|
|
);
|
|
});
|
|
|
|
add_task(async function test_cross_origin_isolated_window() {
|
|
const contentPage = await XPCShellContentUtils.loadContentPage(
|
|
`${SERVER_ORIGIN}/isolated_yes`
|
|
);
|
|
await contentPage.spawn([], () => {
|
|
const window = content;
|
|
Assert.ok(window.crossOriginIsolated, "Window is crossOriginIsolated");
|
|
|
|
let sand1 = Cu.Sandbox([window.document.nodePrincipal], {
|
|
sandboxPrototype: window,
|
|
});
|
|
Assert.equal(
|
|
Cu.evalInSandbox("new SharedArrayBuffer(1).byteLength", sand1),
|
|
1,
|
|
"Sandbox with sandboxPrototype set to window can access SharedArrayBuffer"
|
|
);
|
|
|
|
let sand2 = Cu.Sandbox([window.document.nodePrincipal]);
|
|
Assert.equal(
|
|
Cu.evalInSandbox("typeof SharedArrayBuffer", sand2),
|
|
"undefined",
|
|
"Sandbox without window cannot access SharedArrayBuffer"
|
|
);
|
|
|
|
let sand3 = Cu.Sandbox(window);
|
|
Assert.equal(
|
|
Cu.evalInSandbox("typeof SharedArrayBuffer", sand3),
|
|
"undefined",
|
|
"Sandbox with window as principal arg, without sandboxPrototype, cannot access SharedArrayBuffer"
|
|
);
|
|
|
|
// SharedArrayBuffer not exposed to the sandbox's global, so a lookup is
|
|
// triggered on sandboxPrototype. That fails because the null principal
|
|
// is not allowed access to sandboxPrototype.
|
|
let sand4 = Cu.Sandbox(null, { sandboxPrototype: window });
|
|
Assert.throws(
|
|
() => Cu.evalInSandbox("typeof SharedArrayBuffer", sand4),
|
|
/Permission denied to access property "SharedArrayBuffer" on cross-origin object/,
|
|
"Sandbox with window as sandboxPrototype not subsumed by principal cannot access SharedArrayBuffer"
|
|
);
|
|
|
|
// sandboxPrototype is often set to a window, but in theory it can be set
|
|
// to an object from said window.
|
|
let sand5 = Cu.Sandbox([window.document.nodePrincipal], {
|
|
sandboxPrototype: Cu.createObjectIn(window),
|
|
});
|
|
Assert.equal(
|
|
Cu.evalInSandbox("new SharedArrayBuffer(1).byteLength", sand5),
|
|
1,
|
|
"Sandbox with sandboxPrototype set to window's object can access SharedArrayBuffer"
|
|
);
|
|
});
|
|
await contentPage.close();
|
|
});
|
|
|
|
add_task(async function test_non_cross_origin_isolated_window() {
|
|
const contentPage = await XPCShellContentUtils.loadContentPage(
|
|
`${SERVER_ORIGIN}/isolated_no`
|
|
);
|
|
await contentPage.spawn([], () => {
|
|
const window = content;
|
|
Assert.ok(!window.crossOriginIsolated, "Window is not crossOriginIsolated");
|
|
let sand1 = Cu.Sandbox([window.document.nodePrincipal], {
|
|
sandboxPrototype: window,
|
|
});
|
|
Assert.equal(
|
|
Cu.evalInSandbox("typeof SharedArrayBuffer", sand1),
|
|
"undefined",
|
|
"Sandbox with window that is not crossOriginIsolated does not grant SharedArrayBuffer"
|
|
);
|
|
});
|
|
await contentPage.close();
|
|
});
|