Source code
Revision control
Copy as Markdown
Other Tools
Test Info:
/* Any copyright is dedicated to the Public Domain.
"use strict";
const TEST_URI =
"data:text/html;charset=utf-8,<!DOCTYPE html><p>Test self-XSS protection</p>";
XPCOMUtils.defineLazyServiceGetter(
this,
"clipboardHelper",
"@mozilla.org/widget/clipboardhelper;1",
"nsIClipboardHelper"
);
const WebConsoleUtils =
const stringToCopy = "EvilCommand";
add_task(async function () {
await pushPref("devtools.chrome.enabled", false);
await pushPref("devtools.selfxss.count", 0);
const hud = await openNewTabAndConsole(TEST_URI);
const { ui } = hud;
const { document } = ui;
info("Self-xss paste tests");
WebConsoleUtils.usageCount = 0;
is(WebConsoleUtils.usageCount, 0, "Test for usage count getter");
// Input some commands to check if usage counting is working
for (let i = 0; i <= 3; i++) {
await executeAndWaitForResultMessage(hud, i.toString(), i);
}
is(WebConsoleUtils.usageCount, 4, "Usage count incremented");
WebConsoleUtils.usageCount = 0;
info(`Copy "${stringToCopy}" in clipboard`);
await waitForClipboardPromise(
() => clipboardHelper.copyString(stringToCopy),
stringToCopy
);
goDoCommand("cmd_paste");
const notificationbox = document.getElementById("webconsole-notificationbox");
const notification = notificationbox.querySelector(".notification");
is(
notification.getAttribute("data-key"),
"selfxss-notification",
"Self-xss notification shown"
);
is(getInputValue(hud), "", "Paste blocked by self-xss prevention");
// Allow pasting
const allowToken = "allow pasting";
for (const char of allowToken) {
EventUtils.sendString(char);
}
setInputValue(hud, "");
goDoCommand("cmd_paste");
is(getInputValue(hud), stringToCopy, "Paste works");
});