| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051 |
- <?xml version="1.0"?>
- <?xml-stylesheet type="text/css" href="chrome://global/skin"?>
- <?xml-stylesheet type="text/css" href="chrome://mochikit/content/tests/SimpleTest/test.css"?>
- <!--
- https://bugzilla.mozilla.org/show_bug.cgi?id=866823
- -->
- <window title="Mozilla Bug 866823"
- xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul">
- <script type="application/javascript" src="chrome://mochikit/content/tests/SimpleTest/SimpleTest.js"/>
- <!-- test results are displayed in the html:body -->
- <body xmlns="http://www.w3.org/1999/xhtml">
- <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=866823"
- target="_blank">Mozilla Bug 866823</a>
- </body>
- <!-- test code goes here -->
- <script type="application/javascript">
- <![CDATA[
- /** Test for Bug 866823 **/
- SimpleTest.waitForExplicitFinish();
- const Cu = Components.utils;
- function go() {
- var iwin = $('ifr').contentWindow;
- // Make sure that Xray waivers can't be transitively extended onto objects
- // for whom the extender may not waive.
- var sb = new Cu.Sandbox(iwin, { wantXrays: true });
- sb.iwin = iwin;
- ok(Cu.evalInSandbox('iwin.wrappedJSObject.top == iwin.top', sb), "Waiver does not propagate");
- Cu.evalInSandbox('iwin.wrappedJSObject.waiver = iwin.wrappedJSObject', sb);
- ok(iwin.wrappedJSObject.eval('waiver == window'), "Waivers disappear same-compartment");
- // Make sure that standard prototypes don't get COWs.
- sb.objProto = Object.prototype;
- try {
- sb.eval('objProto.toString;', sb);
- ok(false, "Should have thrown");
- } catch (e) {
- ok(/denied|insecure/, "No silent failure when accessing properties on forbidden prototype");
- }
- SimpleTest.finish();
- }
- ]]>
- </script>
- <iframe id="ifr" onload="go();" type="content" src="http://example.org/tests/js/xpconnect/tests/mochitest/file_empty.html" />
- </window>
|
