test_allowedDomains.js

Enable keyboard shortcuts

function run_test() {

  var sbMaster = Cu.Sandbox(["http://www.a.com",

                           "http://www.b.com",

                           "http://www.d.com"]);

  var sbSubset = Cu.Sandbox(["http://www.d.com",

                           "http://www.a.com"]);

  var sbA = Cu.Sandbox("http://www.a.com");

  var sbB = Cu.Sandbox("http://www.b.com");

  var sbC = Cu.Sandbox("http://www.c.com");

  sbMaster.objA = Cu.evalInSandbox("var obj = {prop1:200}; obj", sbA);

  sbMaster.objB = Cu.evalInSandbox("var obj = {prop1:200}; obj", sbB);

  sbMaster.objC = Cu.evalInSandbox("var obj = {prop1:200}; obj", sbC);

  sbMaster.objOwn = Cu.evalInSandbox("var obj = {prop1:200}; obj", sbMaster);

  sbMaster.objSubset = Cu.evalInSandbox("var obj = {prop1:200}; obj", sbSubset);

  sbA.objMaster = Cu.evalInSandbox("var obj = {prop1:200}; obj", sbMaster);

  sbSubset.objMaster = Cu.evalInSandbox("var obj = {prop1:200}; obj", sbMaster);

  var ret;

  ret = Cu.evalInSandbox("objA.prop1", sbMaster);

  Assert.equal(ret, 200);

  ret = Cu.evalInSandbox("objB.prop1", sbMaster);

  Assert.equal(ret, 200);

  ret = Cu.evalInSandbox("objSubset.prop1", sbMaster);

  Assert.equal(ret, 200);

  function evalAndCatch(str, sb) {

    try {

      ret = Cu.evalInSandbox(str, sb);

      Assert.ok(false, "unexpected pass")

    } catch (e) {

      Assert.ok(e.message && e.message.includes("Permission denied to access property"));

  evalAndCatch("objC.prop1", sbMaster);

  evalAndCatch("objMaster.prop1", sbA);

  evalAndCatch("objMaster.prop1", sbSubset);