1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
|
const Cu = Components.utils;
function checkThrows(fn) {
try {
fn();
ok(false, "Should have thrown");
} catch (e) {
do_check_true(/denied|insecure/.test(e));
}
}
function run_test() {
var xosb = new Cu.Sandbox('http://www.example.org');
var sb = new Cu.Sandbox('http://www.example.com');
sb.do_check_true = do_check_true;
sb.fun = function() { ok(false, "Shouldn't ever reach me"); };
sb.cow = { foopy: 2, __exposedProps__: { foopy: 'rw' } };
sb.payload = Cu.evalInSandbox('new Object()', xosb);
Cu.evalInSandbox(checkThrows.toSource(), sb);
Cu.evalInSandbox('checkThrows(function() { fun(payload); });', sb);
Cu.evalInSandbox('checkThrows(function() { Function.prototype.call.call(fun, payload); });', sb);
Cu.evalInSandbox('checkThrows(function() { Function.prototype.call.call(fun, null, payload); });', sb);
Cu.evalInSandbox('checkThrows(function() { new fun(payload); });', sb);
Cu.evalInSandbox('checkThrows(function() { cow.foopy = payload; });', sb);
Cu.evalInSandbox('checkThrows(function() { Object.defineProperty(cow, "foopy", { value: payload }); });', sb);
// These fail for a different reason, .bind can't access the length/name property on the function.
Cu.evalInSandbox('checkThrows(function() { Function.bind.call(fun, null, payload); });', sb);
Cu.evalInSandbox('checkThrows(function() { Function.bind.call(fun, payload); });', sb);
}
|
