Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2024-12-28 19:38:13 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
98d4b4c7e0
gecko-dev/intl/uconv/tests/test_unicode_noncharacters_utf8.html

301 lines
8.5 KiB
HTML
Raw Normal View History

Tests for Unicode security issues -- bug 445886
2009-01-25 10:10:31 +00:00
<!DOCTYPE HTML>
<html>
<!--
https://bugzilla.mozilla.org/show_bug.cgi?id=445886
-->
<head>
<meta http-equiv="Content-type" content="text/html; charset=UTF-8">
<title>Test for Unicode non-characters</title>
<script type="text/javascript" src="/tests/SimpleTest/SimpleTest.js"></script>
<link rel="stylesheet" type="text/css" href="/tests/SimpleTest/test.css" />
</head>
Use onload instead of setTimeout to reduce random test failures. Bug 482455, r=bz
2009-03-10 21:07:33 +00:00
<body onload="Inject()">
Tests for Unicode security issues -- bug 445886
2009-01-25 10:10:31 +00:00
<pre id="test">
<script class="testbody" type="text/javascript">
/** Test that unicode non-characters are not discarded **/
function test()
{
Use onload instead of setTimeout to reduce random test failures. Bug 482455, r=bz
2009-03-10 21:07:33 +00:00
is($("display").innerHTML, "All good.", "Noncharacters not stripped");
Tests for Unicode security issues -- bug 445886
2009-01-25 10:10:31 +00:00
SimpleTest.finish();
}
function Inject()
{
// script fragments containing Unicode non-characters
try {
// U+FDD0
eval("$(\"display\").inner﷐HTML += \" U+FDD0 is evil \"");
} catch(e) {}
try {
// U+FDD1
eval("$(\"display\").inner﷑HTML += \" U+FDD1 is evil \"");
} catch(e) {}
try {
// U+FDD2
eval("$(\"display\").inner﷒HTML += \" U+FDD2 is evil \"");
} catch(e) {}
try {
// U+FDD3
eval("$(\"display\").inner﷓HTML += \" U+FDD3 is evil \"");
} catch(e) {}
try {
// U+FDD4
eval("$(\"display\").inner﷔HTML += \" U+FDD4 is evil \"");
} catch(e) {}
try {
// U+FDD5
eval("$(\"display\").inner﷕HTML += \" U+FDD5 is evil \"");
} catch(e) {}
try {
// U+FDD6
eval("$(\"display\").inner﷖HTML += \" U+FDD6 is evil \"");
} catch(e) {}
try {
// U+FDD7
eval("$(\"display\").inner﷗HTML += \" U+FDD7 is evil \"");
} catch(e) {}
try {
// U+FDD8
eval("$(\"display\").inner﷘HTML += \" U+FDD8 is evil \"");
} catch(e) {}
try {
// U+FDD9
eval("$(\"display\").inner﷙HTML += \" U+FDD9 is evil \"");
} catch(e) {}
try {
// U+FDDA
eval("$(\"display\").inner﷚HTML += \" U+FDDA is evil \"");
} catch(e) {}
try {
// U+FDDB
eval("$(\"display\").inner﷛HTML += \" U+FDDB is evil \"");
} catch(e) {}
try {
// U+FDDC
eval("$(\"display\").inner﷜HTML += \" U+FDDC is evil \"");
} catch(e) {}
try {
// U+FDDD
eval("$(\"display\").inner﷝HTML += \" U+FDDD is evil \"");
} catch(e) {}
try {
// U+FDDE
eval("$(\"display\").inner﷞HTML += \" U+FDDE is evil \"");
} catch(e) {}
try {
// U+FDDF
eval("$(\"display\").inner﷟HTML += \" U+FDDF is evil \"");
} catch(e) {}
try {
// U+FDE0
eval("$(\"display\").inner﷠HTML += \" U+FDE0 is evil \"");
} catch(e) {}
try {
// U+FDE1
eval("$(\"display\").inner﷡HTML += \" U+FDE1 is evil \"");
} catch(e) {}
try {
// U+FDE2
eval("$(\"display\").inner﷢HTML += \" U+FDE2 is evil \"");
} catch(e) {}
try {
// U+FDE3
eval("$(\"display\").inner﷣HTML += \" U+FDE3 is evil \"");
} catch(e) {}
try {
// U+FDE4
eval("$(\"display\").inner﷤HTML += \" U+FDE4 is evil \"");
} catch(e) {}
try {
// U+FDE5
eval("$(\"display\").inner﷥HTML += \" U+FDE5 is evil \"");
} catch(e) {}
try {
// U+FDE6
eval("$(\"display\").inner﷦HTML += \" U+FDE6 is evil \"");
} catch(e) {}
try {
// U+FDE7
eval("$(\"display\").inner﷧HTML += \" U+FDE7 is evil \"");
} catch(e) {}
try {
// U+FDE8
eval("$(\"display\").inner﷨HTML += \" U+FDE8 is evil \"");
} catch(e) {}
try {
// U+FDE9
eval("$(\"display\").inner﷩HTML += \" U+FDE9 is evil \"");
} catch(e) {}
try {
// U+FDEA
eval("$(\"display\").inner﷪HTML += \" U+FDEA is evil \"");
} catch(e) {}
try {
// U+FDEB
eval("$(\"display\").inner﷫HTML += \" U+FDEB is evil \"");
} catch(e) {}
try {
// U+FDEC
eval("$(\"display\").inner﷬HTML += \" U+FDEC is evil \"");
} catch(e) {}
try {
// U+FDED
eval("$(\"display\").inner﷭HTML += \" U+FDED is evil \"");
} catch(e) {}
try {
// U+FDEE
eval("$(\"display\").inner﷮HTML += \" U+FDEE is evil \"");
} catch(e) {}
try {
// U+FDEF
eval("$(\"display\").inner﷯HTML += \" U+FDEF is evil \"");
} catch(e) {}
try {
// U+FFFE
eval("$(\"display\").inner￾HTML += \" U+FFFE is evil \"");
} catch(e) {}
try {
// U+FFFF
eval("$(\"display\").inner￿HTML += \" U+FFFF is evil \"");
} catch(e) {}
try {
// U+1FFFE
eval("$(\"display\").inner🿾HTML += \" U+1FFFE is evil \"");
} catch(e) {}
try {
// U+1FFFF
eval("$(\"display\").inner🿿HTML += \" U+1FFFF is evil \"");
} catch(e) {}
try {
// U+2FFFE
eval("$(\"display\").inner𯿾HTML += \" U+2FFFE is evil \"");
} catch(e) {}
try {
// U+2FFFF
eval("$(\"display\").inner𯿿HTML += \" U+2FFFF is evil \"");
} catch(e) {}
try {
// U+3FFFE
eval("$(\"display\").inner𿿾HTML += \" U+3FFFE is evil \"");
} catch(e) {}
try {
// U+3FFFF
eval("$(\"display\").inner𿿿HTML += \" U+3FFFF is evil \"");
} catch(e) {}
try {
// U+4FFFE
eval("$(\"display\").inner񏿾HTML += \" U+4FFFE is evil \"");
} catch(e) {}
try {
// U+4FFFF
eval("$(\"display\").inner񏿿HTML += \" U+4FFFF is evil \"");
} catch(e) {}
try {
// U+5FFFE
eval("$(\"display\").inner񟿾HTML += \" U+5FFFE is evil \"");
} catch(e) {}
try {
// U+5FFFF
eval("$(\"display\").inner񟿿HTML += \" U+5FFFF is evil \"");
} catch(e) {}
try {
// U+6FFFE
eval("$(\"display\").inner񯿾HTML += \" U+6FFFE is evil \"");
} catch(e) {}
try {
// U+6FFFF
eval("$(\"display\").inner񯿿HTML += \" U+6FFFF is evil \"");
} catch(e) {}
try {
// U+7FFFE
eval("$(\"display\").inner񿿾HTML += \" U+7FFFE is evil \"");
} catch(e) {}
try {
// U+7FFFF
eval("$(\"display\").inner񿿿HTML += \" U+7FFFF is evil \"");
} catch(e) {}
try {
// U+8FFFE
eval("$(\"display\").inner򏿾HTML += \" U+8FFFE is evil \"");
} catch(e) {}
try {
// U+8FFFF
eval("$(\"display\").inner򏿿HTML += \" U+8FFFF is evil \"");
} catch(e) {}
try {
// U+9FFFE
eval("$(\"display\").inner򟿾HTML += \" U+9FFFE is evil \"");
} catch(e) {}
try {
// U+9FFFF
eval("$(\"display\").inner򟿿HTML += \" U+9FFFF is evil \"");
} catch(e) {}
try {
// U+AFFFE
eval("$(\"display\").inner򯿾HTML += \" U+AFFFE is evil \"");
} catch(e) {}
try {
// U+AFFFF
eval("$(\"display\").inner򯿿HTML += \" U+AFFFF is evil \"");
} catch(e) {}
try {
// U+BFFFE
eval("$(\"display\").inner򿿾HTML += \" U+BFFFE is evil \"");
} catch(e) {}
try {
// U+BFFFF
eval("$(\"display\").inner򿿿HTML += \" U+BFFFF is evil \"");
} catch(e) {}
try {
// U+CFFFE
eval("$(\"display\").inner󏿾HTML += \" U+CFFFE is evil \"");
} catch(e) {}
try {
// U+CFFFF
eval("$(\"display\").inner󏿿HTML += \" U+CFFFF is evil \"");
} catch(e) {}
try {
// U+DFFFE
eval("$(\"display\").inner󟿾HTML += \" U+DFFFE is evil \"");
} catch(e) {}
try {
// U+DFFFF
eval("$(\"display\").inner󟿿HTML += \" U+DFFFF is evil \"");
} catch(e) {}
try {
// U+EFFFE
eval("$(\"display\").inner󯿾HTML += \" U+EFFFE is evil \"");
} catch(e) {}
try {
// U+EFFFF
eval("$(\"display\").inner󯿿HTML += \" U+EFFFF is evil \"");
} catch(e) {}
try {
// U+FFFFE
eval("$(\"display\").inner󿿾HTML += \" U+FFFFE is evil \"");
} catch(e) {}
try {
// U+FFFFF
eval("$(\"display\").inner󿿿HTML += \" U+FFFFF is evil \"");
} catch(e) {}
try {
// U+10FFFE
eval("$(\"display\").inner􏿾HTML += \" U+10FFFE is evil \"");
} catch(e) {}
try {
// U+10FFFF
eval("$(\"display\").inner􏿿HTML += \" U+10FFFF is evil \"");
} catch(e) {}
test();
}
SimpleTest.waitForExplicitFinish();
</script>
</pre>
<a target="_blank" href="https://bugzilla.mozilla.org/show_bug.cgi?id=445886">Mozilla Bug 445886</a>
<p id="display">All good.</p>
<div id="content" style="display: none"></div>
</body>
</html>
Reference in New Issue Copy Permalink