test_jar_protocol_flags.js

Enable keyboard shortcuts

/* Any copyright is dedicated to the Public Domain.

   https://creativecommons.org/publicdomain/zero/1.0/ */

"use strict";

const PH = Ci.nsIProtocolHandler;

const ssm = Services.scriptSecurityManager;

add_task(function test_flags() {

  const flags = Services.io.getProtocolFlags("jar");

  Assert.ok(flags & PH.URI_IS_LOCAL_FILE, "jar: claims URI_IS_LOCAL_FILE");

  Assert.ok(

    !(flags & PH.URI_LOADABLE_BY_ANYONE),

    "jar: is not loadable by anyone"

);

});

add_task(function test_web_content_cannot_load_remote_jar() {

  const principal = ssm.createContentPrincipalFromOrigin("https://example.com");

  const uri = Services.io.newURI(

    "jar:https://example.org/archive.jar!/index.html"

);

  Assert.throws(

    () => ssm.checkLoadURIWithPrincipal(principal, uri, 0),

    /denied/,

    "web content cannot load a jar: URI wrapping a remote resource"

);

});

add_task(function test_web_content_cannot_load_local_jar() {

  const principal = ssm.createContentPrincipalFromOrigin("https://example.com");

  const uri = Services.io.newURI("jar:file:///archive.jar!/index.html");

  Assert.throws(

    () => ssm.checkLoadURIWithPrincipal(principal, uri, 0),

    /denied/,

    "web content cannot load a jar: URI wrapping a local file"

);

});

add_task(function test_privileged_callers_can_load_jar() {

  for (const spec of [

    "jar:file:///archive.jar!/index.html",

    "jar:https://example.org/archive.jar!/index.html",

  ]) {

    const uri = Services.io.newURI(spec);

    ssm.checkLoadURIWithPrincipal(ssm.getSystemPrincipal(), uri, 0);

    Assert.ok(true, `system principal may load ${spec}`);

});