gecko-dev/dom/workers/test/test_csp.js
Sebastian Hengst c7cc4bc5c8 Backed out changesets 5a3092c456c0,8dcbfd14f1e5 (bug 1218433) for M3, W3 failures and M10 failure on Android. r=backout
* * *
Backed out changeset 8dcbfd14f1e5 (bug 1218433)


462 INFO TEST-UNEXPECTED-FAIL | dom/security/test/csp/test_child-src_worker-redirect.html | CSP child-src worker test other-src-worker_redir-same - got "Error: Failed to load script (nsresult = 0x805e0006)", expected "blocked"
479 INFO TEST-UNEXPECTED-FAIL | dom/security/test/csp/test_child-src_worker.html | Test timed out.
486 INFO TEST-UNEXPECTED-FAIL | dom/security/test/csp/test_child-src_worker_data.html | Test timed out.
2015-11-12 18:44:51 +01:00

49 lines
1.2 KiB
JavaScript

/**
* Any copyright is dedicated to the Public Domain.
* http://creativecommons.org/publicdomain/zero/1.0/
*/
var tests = 3;
SimpleTest.waitForExplicitFinish();
testDone = function(event) {
if (!--tests) SimpleTest.finish();
}
// Workers don't inherit CSP
worker = new Worker("csp_worker.js");
worker.postMessage({ do: "eval" });
worker.onmessage = function(event) {
is(event.data, 42, "Eval succeeded!");
testDone();
}
// blob: workers *do* inherit CSP
xhr = new XMLHttpRequest;
xhr.open("GET", "csp_worker.js");
xhr.responseType = "blob";
xhr.send();
xhr.onload = (e) => {
uri = URL.createObjectURL(e.target.response);
worker = new Worker(uri);
worker.postMessage({ do: "eval" })
worker.onmessage = function(event) {
is(event.data, "Error: call to eval() blocked by CSP", "Eval threw");
testDone();
}
}
xhr = new XMLHttpRequest;
xhr.open("GET", "csp_worker.js");
xhr.responseType = "blob";
xhr.send();
xhr.onload = (e) => {
uri = URL.createObjectURL(e.target.response);
worker = new Worker(uri);
worker.postMessage({ do: "nest", uri: uri, level: 3 })
worker.onmessage = function(event) {
is(event.data, "Error: call to eval() blocked by CSP", "Eval threw in nested worker");
testDone();
}
}