mozilla-central/dom/security/test/unit/test_https_only_https_first_prefs.js (file symbol)

Source code

Revision control

Copy as Markdown

Other Tools

Test Info: Warnings

const { HttpServer } = ChromeUtils.importESModule(
);
const { NetUtil } = ChromeUtils.importESModule(
);
ChromeUtils.defineLazyGetter(this, "HTTP_TEST_URL", function () {
});
const TEST_PATH = "/https_only_https_first_path";
var httpserver = null;
var channel = null;
var curTest = null;
const TESTS = [
{
// Test 1: all prefs to false
description: "Test 1 - top-level",
contentType: Ci.nsIContentPolicy.TYPE_DOCUMENT,
https_only: false,
https_only_pbm: false,
https_first: false,
https_first_pbm: false,
pbm: false,
expectedScheme: "http",
},
{
description: "Test 1 - top-level - pbm",
contentType: Ci.nsIContentPolicy.TYPE_DOCUMENT,
https_only: false,
https_only_pbm: false,
https_first: false,
https_first_pbm: false,
pbm: true,
expectedScheme: "http",
},
{
description: "Test 1 - sub-resource",
contentType: Ci.nsIContentPolicy.TYPE_IMAGE,
https_only: false,
https_only_pbm: false,
https_first: false,
https_first_pbm: false,
pbm: false,
expectedScheme: "http",
},
{
description: "Test 1 - sub-resource - pbm",
contentType: Ci.nsIContentPolicy.TYPE_IMAGE,
https_only: false,
https_only_pbm: false,
https_first: false,
https_first_pbm: false,
pbm: true,
expectedScheme: "http",
},
// Test 2: https_only true
{
description: "Test 2 - top-level",
contentType: Ci.nsIContentPolicy.TYPE_DOCUMENT,
https_only: true,
https_only_pbm: false,
https_first: false,
https_first_pbm: false,
pbm: false,
expectedScheme: "https",
},
{
description: "Test 2 - top-level - pbm",
contentType: Ci.nsIContentPolicy.TYPE_DOCUMENT,
https_only: true,
https_only_pbm: false,
https_first: false,
https_first_pbm: false,
pbm: true,
expectedScheme: "https",
},
{
description: "Test 2 - sub-resource",
contentType: Ci.nsIContentPolicy.TYPE_IMAGE,
https_only: true,
https_only_pbm: false,
https_first: false,
https_first_pbm: false,
pbm: false,
expectedScheme: "https",
},
{
description: "Test 2 - sub-resource - pbm",
contentType: Ci.nsIContentPolicy.TYPE_IMAGE,
https_only: true,
https_only_pbm: false,
https_first: false,
https_first_pbm: false,
pbm: true,
expectedScheme: "https",
},
// Test 3: https_only_pbm true
{
description: "Test 3 - top-level",
contentType: Ci.nsIContentPolicy.TYPE_DOCUMENT,
https_only: false,
https_only_pbm: true,
https_first: false,
https_first_pbm: false,
pbm: false,
expectedScheme: "http",
},
{
description: "Test 3 - top-level - pbm",
contentType: Ci.nsIContentPolicy.TYPE_DOCUMENT,
https_only: false,
https_only_pbm: true,
https_first: false,
https_first_pbm: false,
pbm: true,
expectedScheme: "https",
},
{
description: "Test 3 - sub-resource",
contentType: Ci.nsIContentPolicy.TYPE_IMAGE,
https_only: false,
https_only_pbm: true,
https_first: false,
https_first_pbm: false,
pbm: false,
expectedScheme: "http",
},
{
description: "Test 3 - sub-resource - pbm",
contentType: Ci.nsIContentPolicy.TYPE_IMAGE,
https_only: false,
https_only_pbm: true,
https_first: false,
https_first_pbm: false,
pbm: true,
expectedScheme: "https",
},
// Test 4: https_first true
{
description: "Test 4 - top-level",
contentType: Ci.nsIContentPolicy.TYPE_DOCUMENT,
https_only: false,
https_only_pbm: false,
https_first: true,
https_first_pbm: false,
pbm: false,
expectedScheme: "https",
},
{
description: "Test 4 - top-level - pbm",
contentType: Ci.nsIContentPolicy.TYPE_DOCUMENT,
https_only: false,
https_only_pbm: false,
https_first: true,
https_first_pbm: false,
pbm: true,
expectedScheme: "https",
},
{
description: "Test 4 - sub-resource",
contentType: Ci.nsIContentPolicy.TYPE_IMAGE,
https_only: false,
https_only_pbm: false,
https_first: true,
https_first_pbm: false,
pbm: false,
expectedScheme: "http",
},
{
description: "Test 4 - sub-resource - pbm",
contentType: Ci.nsIContentPolicy.TYPE_IMAGE,
https_only: false,
https_only_pbm: false,
https_first: true,
https_first_pbm: false,
pbm: true,
expectedScheme: "http",
},
// Test 5: https_first_pbm true
{
description: "Test 5 - top-level",
contentType: Ci.nsIContentPolicy.TYPE_DOCUMENT,
https_only: false,
https_only_pbm: false,
https_first: false,
https_first_pbm: true,
pbm: false,
expectedScheme: "http",
},
{
description: "Test 5 - top-level - pbm",
contentType: Ci.nsIContentPolicy.TYPE_DOCUMENT,
https_only: false,
https_only_pbm: false,
https_first: false,
https_first_pbm: true,
pbm: true,
expectedScheme: "https",
},
{
description: "Test 5 - sub-resource",
contentType: Ci.nsIContentPolicy.TYPE_IMAGE,
https_only: false,
https_only_pbm: false,
https_first: false,
https_first_pbm: true,
pbm: false,
expectedScheme: "http",
},
{
description: "Test 5 - sub-resource - pbm",
contentType: Ci.nsIContentPolicy.TYPE_IMAGE,
https_only: false,
https_only_pbm: false,
https_first: false,
https_first_pbm: true,
pbm: true,
expectedScheme: "http",
},
// Test 6: https_only overrules https_first
{
description: "Test 6 - top-level",
contentType: Ci.nsIContentPolicy.TYPE_DOCUMENT,
https_only: true,
https_only_pbm: false,
https_first: true,
https_first_pbm: false,
pbm: false,
expectedScheme: "https",
},
{
description: "Test 6 - top-level - pbm",
contentType: Ci.nsIContentPolicy.TYPE_DOCUMENT,
https_only: true,
https_only_pbm: false,
https_first: true,
https_first_pbm: false,
pbm: true,
expectedScheme: "https",
},
{
description: "Test 6 - sub-resource",
contentType: Ci.nsIContentPolicy.TYPE_IMAGE,
https_only: true,
https_only_pbm: false,
https_first: true,
https_first_pbm: false,
pbm: false,
expectedScheme: "https",
},
{
description: "Test 6 - sub-resource - pbm",
contentType: Ci.nsIContentPolicy.TYPE_IMAGE,
https_only: true,
https_only_pbm: false,
https_first: true,
https_first_pbm: false,
pbm: true,
expectedScheme: "https",
},
];
function ChannelListener() {}
ChannelListener.prototype = {
onStartRequest(request) {
var chan = request.QueryInterface(Ci.nsIChannel);
var httpChan = chan.QueryInterface(Ci.nsIHttpChannel);
var authHeader = httpChan.getRequestHeader("Authorization");
Assert.equal(authHeader, "Basic user:pass", curTest.description);
},
onDataAvailable() {
do_throw("Should not get any data!");
},
onStopRequest(request) {
var chan = request.QueryInterface(Ci.nsIChannel);
let requestURL = chan.URI;
Assert.equal(
requestURL.scheme,
curTest.expectedScheme,
curTest.description
);
Assert.equal(requestURL.host, "test1.example.com", curTest.description);
Assert.equal(requestURL.filePath, TEST_PATH, curTest.description);
run_next_test();
},
};
function setUpPrefs() {
// set up the required prefs
Services.prefs.setBoolPref(
"dom.security.https_only_mode",
curTest.https_only
);
Services.prefs.setBoolPref(
"dom.security.https_only_mode_pbm",
curTest.https_only_pbm
);
Services.prefs.setBoolPref("dom.security.https_first", curTest.https_first);
Services.prefs.setBoolPref(
"dom.security.https_first_pbm",
curTest.https_first_pbm
);
}
function setUpChannel() {
// 1) Set up Principal using OA in case of Private Browsing
let attr = {};
if (curTest.pbm) {
attr.privateBrowsingId = 1;
}
let uri = Services.io.newURI("http://test1.example.com");
let principal = Services.scriptSecurityManager.createContentPrincipal(
uri,
attr
);
// 2) Set up Channel
var chan = NetUtil.newChannel({
uri: HTTP_TEST_URL + TEST_PATH,
loadingPrincipal: principal,
contentPolicyType: curTest.contentType,
securityFlags: Ci.nsILoadInfo.SEC_ALLOW_CROSS_ORIGIN_SEC_CONTEXT_IS_NULL,
});
chan.QueryInterface(Ci.nsIHttpChannel);
chan.requestMethod = "GET";
chan.setRequestHeader("Authorization", "Basic user:pass", false);
return chan;
}
function serverHandler() {
// dummy implementation
}
function run_next_test() {
curTest = TESTS.shift();
if (!curTest) {
httpserver.stop(do_test_finished);
return;
}
setUpPrefs();
channel = setUpChannel();
channel.asyncOpen(new ChannelListener());
}
function run_test() {
do_get_profile();
// set up the test environment
httpserver = new HttpServer();
httpserver.registerPathHandler(TEST_PATH, serverHandler);
httpserver.start(-1);
run_next_test();
do_test_pending();
}