1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
|
const Cu = Components.utils;
function run_test() {
var sb = new Cu.Sandbox('http://www.example.com');
function checkThrows(str, rgxp) {
try {
sb.eval(str);
do_check_true(false);
} catch (e) {
do_check_true(rgxp.test(e));
}
}
sb.exposed = {
get getterProp() { return 42; },
set setterProp(x) { },
get getterSetterProp() { return 42; },
set getterSetterProp(x) { },
simpleValueProp: 42,
objectValueProp: { val: 42, __exposedProps__: { val: 'r' } },
contentCallableValueProp: new sb.Function('return 42'),
chromeCallableValueProp: function() {},
__exposedProps__: { getterProp : 'r',
setterProp : 'w',
getterSetterProp: 'rw',
simpleValueProp: 'r',
objectValueProp: 'r',
contentCallableValueProp: 'r',
chromeCallableValueProp: 'r' }
};
do_check_eq(sb.eval('exposed.simpleValueProp'), 42);
do_check_eq(sb.eval('exposed.objectValueProp.val'), 42);
checkThrows('exposed.getterProp;', /privileged accessor/i);
checkThrows('exposed.setterProp = 42;', /privileged accessor/i);
checkThrows('exposed.getterSetterProp;', /privileged accessor/i);
checkThrows('exposed.getterSetterProp = 42;', /privileged accessor/i);
do_check_eq(sb.eval('exposed.contentCallableValueProp()'), 42);
checkThrows('exposed.chromeCallableValueProp();', /privileged or cross-origin callable/i);
}
|
