Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2024-12-11 08:13:35 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Bug 1635050 - Implement a whitelist system for cookieBehavior REJECT_FOREIGN with exceptions - tests, r=dimi

Browse Source 
Differential Revision: https://phabricator.services.mozilla.com/D73616
This commit is contained in:
Andrea Marchesini 2020-05-11 10:59:55 +00:00
parent f697165e60
commit fa593c827a
2 changed files with 130 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

128
toolkit/components/antitracking/test/xpcshell/test_rejectForeignAllowList.js Normal file
View File

@ -0,0 +1,128 @@
"use strict";
var { Services } = ChromeUtils.import("resource://gre/modules/Services.jsm");
const { RemoteSettings } = ChromeUtils.import(
"resource://services-settings/remote-settings.js"
);
do_get_profile();
// Let's use AddonTestUtils and ExtensionTestUtils to open/close tabs.
var { AddonTestUtils, MockAsyncShutdown } = ChromeUtils.import(
"resource://testing-common/AddonTestUtils.jsm"
);
// eslint-disable-next-line no-unused-vars
XPCOMUtils.defineLazyModuleGetters(this, {
ExtensionTestUtils: "resource://testing-common/ExtensionXPCShellUtils.jsm",
});
ExtensionTestUtils.init(this);
var createHttpServer = (...args) => {
AddonTestUtils.maybeInit(this);
return AddonTestUtils.createHttpServer(...args);
};
const server = createHttpServer({
hosts: ["3rdparty.org", "4thparty.org", "foobar.com"],
});
async function testThings(prefValue, expected) {
await new Promise(resolve =>
Services.clearData.deleteData(
Ci.nsIClearDataService.CLEAR_ALL_CACHES,
resolve
)
);
Services.prefs.setCharPref("privacy.rejectForeign.allowList", prefValue);
let cookiePromise = new Promise(resolve => {
server.registerPathHandler("/test3rdPartyChannel", (request, response) => {
response.setStatusLine(request.httpVersion, 200, "OK");
response.setHeader("Content-Type", "text/html; charset=utf-8", false);
response.write(`<html><img src="http://3rdparty.org/img" /></html>`);
});
server.registerPathHandler("/img", (request, response) => {
response.setStatusLine(request.httpVersion, 200, "OK");
resolve(request.hasHeader("Cookie") ? request.getHeader("Cookie") : "");
response.setHeader("Content-Type", "image/png", false);
response.write("Not an image");
});
});
// Let's load 3rdparty.org as a 3rd-party.
let contentPage = await ExtensionTestUtils.loadContentPage(
"http://foobar.com/test3rdPartyChannel"
);
Assert.equal(await cookiePromise, expected, "Cookies received?");
await contentPage.close();
cookiePromise = new Promise(resolve => {
server.registerPathHandler("/test3rdPartyDocument", (request, response) => {
response.setStatusLine(request.httpVersion, 200, "OK");
response.setHeader("Content-Type", "text/html; charset=utf-8", false);
response.write(
`<html><iframe src="http://3rdparty.org/iframe" /></html>`
);
});
server.registerPathHandler("/iframe", (request, response) => {
response.setStatusLine(request.httpVersion, 200, "OK");
resolve(request.hasHeader("Cookie") ? request.getHeader("Cookie") : "");
response.setHeader("Content-Type", "text/html; charset=utf-8", false);
response.write(`<html><img src="http://4thparty.org/img" /></html>`);
});
server.registerPathHandler("/img", (request, response) => {
response.setStatusLine(request.httpVersion, 200, "OK");
resolve(request.hasHeader("Cookie") ? request.getHeader("Cookie") : "");
response.setHeader("Content-Type", "image/png", false);
response.write("Not an image");
});
});
// Let's load 3rdparty.org loading a 4th-party.
contentPage = await ExtensionTestUtils.loadContentPage(
"http://foobar.com/test3rdPartyDocument"
);
Assert.equal(await cookiePromise, expected, "Cookies received?");
await contentPage.close();
}
add_task(async function test_rejectForeignAllowList() {
Services.prefs.setIntPref("network.cookie.cookieBehavior", 1);
Services.prefs.setBoolPref(
"network.cookie.rejectForeignWithExceptions.enabled",
true
);
// We don't want to have 'secure' cookies because our test http server doesn't run in https.
Services.prefs.setBoolPref(
"network.cookie.sameSite.noneRequiresSecure",
false
);
server.registerPathHandler("/setCookies", (request, response) => {
response.setStatusLine(request.httpVersion, 200, "OK");
response.setHeader("Content-Type", "text/html; charset=utf-8", false);
response.setHeader("Set-Cookie", "cookie=wow; sameSite=none", true);
response.write("<html></html>");
});
// Let's set a cookie.
let contentPage = await ExtensionTestUtils.loadContentPage(
"http://3rdparty.org/setCookies"
);
await contentPage.close();
Assert.equal(Services.cookies.cookies.length, 1);
// Without whitelisting, no cookies should be shared.
await testThings("", "");
// Let's whitelist 3rdparty.org
await testThings("3rdparty.org", "cookie=wow");
});

2
toolkit/components/antitracking/test/xpcshell/xpcshell.ini
View File

@ -3,3 +3,5 @@ head = head.js ../../../../components/url-classifier/tests/unit/head_urlclassifi
[test_purge_trackers.js]
[test_tracking_db_service.js]
[test_rejectForeignAllowList.js]
skip-if = toolkit == 'android' # Bug 1567341