Source code
Revision control
Copy as Markdown
Other Tools
Test Info: Warnings
- This test gets skipped with pattern: os == 'linux' && os_version == '18.04' && asan OR os == 'linux' && os_version == '18.04' && tsan OR debug OR socketprocess_networking
- Manifest: toolkit/components/antitracking/test/browser/browser-blocking.toml
requestLongerTimeout(4);
Services.prefs.setBoolPref("network.cookie.sameSite.laxByDefault", false);
registerCleanupFunction(() => {
Services.prefs.clearUserPref("network.cookie.sameSite.laxByDefault");
});
AntiTracking.runTestInNormalAndPrivateMode(
"Set/Get Cookies",
// Blocking callback
async _ => {
is(document.cookie, "", "No cookies for me");
document.cookie = "name=value";
is(document.cookie, "", "No cookies for me");
for (let arg of ["?checkonly", "?redirect-checkonly"]) {
info(`checking with arg=${arg}`);
await fetch("server.sjs" + arg)
.then(r => r.text())
.then(text => {
is(text, "cookie-not-present", "We should not have cookies");
});
// Let's do it twice.
await fetch("server.sjs" + arg)
.then(r => r.text())
.then(text => {
is(text, "cookie-not-present", "We should not have cookies");
});
}
is(document.cookie, "", "Still no cookies for me");
},
// Non blocking callback
async _ => {
is(document.cookie, "", "No cookies for me");
// Note: The ?redirect test is _not_ using checkonly, so it will actually
// set our foopy=1 cookie.
for (let arg of ["?checkonly", "?redirect"]) {
info(`checking with arg=${arg}`);
await fetch("server.sjs" + arg)
.then(r => r.text())
.then(text => {
is(text, "cookie-not-present", "We should not have cookies");
});
}
document.cookie = "name=value";
ok(document.cookie.includes("name=value"), "Some cookies for me");
ok(document.cookie.includes("foopy=1"), "Some cookies for me");
for (let arg of ["", "?redirect"]) {
info(`checking with arg=${arg}`);
await fetch("server.sjs" + arg)
.then(r => r.text())
.then(text => {
is(text, "cookie-present", "We should have cookies");
});
}
ok(document.cookie.length, "Some Cookies for me");
},
// Cleanup callback
async _ => {
await new Promise(resolve => {
Services.clearData.deleteData(Ci.nsIClearDataService.CLEAR_ALL, () =>
resolve()
);
});
}
);
AntiTracking.runTestInNormalAndPrivateMode(
"Cookies and Storage Access API",
// Blocking callback
async _ => {
/* import-globals-from storageAccessAPIHelpers.js */
await noStorageAccessInitially();
is(document.cookie, "", "No cookies for me");
document.cookie = "name=value";
is(document.cookie, "", "No cookies for me");
for (let arg of ["", "?redirect"]) {
info(`checking with arg=${arg}`);
await fetch("server.sjs" + arg)
.then(r => r.text())
.then(text => {
is(text, "cookie-not-present", "We should not have cookies");
});
// Let's do it twice.
await fetch("server.sjs" + arg)
.then(r => r.text())
.then(text => {
is(text, "cookie-not-present", "We should not have cookies");
});
}
is(document.cookie, "", "Still no cookies for me");
/* import-globals-from storageAccessAPIHelpers.js */
await callRequestStorageAccess();
is(document.cookie, "", "No cookies for me");
document.cookie = "name=value";
let effectiveCookieBehavior = SpecialPowers.isContentWindowPrivate(window)
? SpecialPowers.Services.prefs.getIntPref(
"network.cookie.cookieBehavior.pbmode"
)
: SpecialPowers.Services.prefs.getIntPref(
"network.cookie.cookieBehavior"
);
if (
[
SpecialPowers.Ci.nsICookieService.BEHAVIOR_REJECT,
SpecialPowers.Ci.nsICookieService.BEHAVIOR_REJECT_FOREIGN,
].includes(effectiveCookieBehavior)
) {
is(document.cookie, "", "No cookies for me");
} else {
is(document.cookie, "name=value", "I have the cookies!");
}
},
// Non blocking callback
async _ => {
/* import-globals-from storageAccessAPIHelpers.js */
await hasStorageAccessInitially();
is(document.cookie, "", "No cookies for me");
// Note: The ?redirect test is _not_ using checkonly, so it will actually
// set our foopy=1 cookie.
for (let arg of ["?checkonly", "?redirect"]) {
info(`checking with arg=${arg}`);
await fetch("server.sjs" + arg)
.then(r => r.text())
.then(text => {
is(text, "cookie-not-present", "We should not have cookies");
});
}
document.cookie = "name=value";
ok(document.cookie.includes("name=value"), "Some cookies for me");
ok(document.cookie.includes("foopy=1"), "Some cookies for me");
for (let arg of ["", "?redirect"]) {
info(`checking with arg=${arg}`);
await fetch("server.sjs" + arg)
.then(r => r.text())
.then(text => {
is(text, "cookie-present", "We should have cookies");
});
}
ok(document.cookie.length, "Some Cookies for me");
/* import-globals-from storageAccessAPIHelpers.js */
await callRequestStorageAccess();
// For non-tracking windows, calling the API is a no-op
ok(document.cookie.length, "Still some Cookies for me");
ok(document.cookie.includes("name=value"), "Some cookies for me");
ok(document.cookie.includes("foopy=1"), "Some cookies for me");
},
// Cleanup callback
async _ => {
await new Promise(resolve => {
Services.clearData.deleteData(Ci.nsIClearDataService.CLEAR_ALL, () =>
resolve()
);
});
},
null,
false,
false
);
AntiTracking._createTask({
name: "Block cookies with BEHAVIOR_REJECT_TRACKER_AND_PARTITION_FOREIGN when preference is enabled",
cookieBehavior: BEHAVIOR_REJECT_TRACKER_AND_PARTITION_FOREIGN,
allowList: false,
callback: async _ => {
document.cookie = "name=value";
is(document.cookie, "", "Document cookie is blocked");
await fetch("server.sjs")
.then(r => r.text())
.then(text => {
is(text, "cookie-not-present", "We should not have HTTP cookies");
});
await fetch("server.sjs?checkonly")
.then(r => r.text())
.then(text => {
is(
text,
"cookie-not-present",
"We should still not have HTTP cookies after setting them via HTTP"
);
});
is(
document.cookie,
"",
"Document cookie is still blocked after setting via HTTP"
);
},
extraPrefs: [["network.cookie.cookieBehavior.optInPartitioning", true]],
thirdPartyPage: TEST_4TH_PARTY_PAGE,
runInPrivateWindow: false,
iframeSandbox: null,
accessRemoval: null,
callbackAfterRemoval: null,
});
AntiTracking._createTask({
name: "Block cookies with BEHAVIOR_REJECT_TRACKER_AND_PARTITION_FOREIGN when preference is enabled in pbmode",
cookieBehavior: BEHAVIOR_REJECT_TRACKER_AND_PARTITION_FOREIGN,
allowList: false,
callback: async _ => {
document.cookie = "name=value";
is(document.cookie, "", "Document cookie is blocked");
await fetch("server.sjs")
.then(r => r.text())
.then(text => {
is(text, "cookie-not-present", "We should not have HTTP cookies");
});
await fetch("server.sjs?checkonly")
.then(r => r.text())
.then(text => {
is(
text,
"cookie-not-present",
"We should still not have HTTP cookies after setting them via HTTP"
);
});
is(
document.cookie,
"",
"Document cookie is still blocked after setting via HTTP"
);
},
extraPrefs: [["network.cookie.cookieBehavior.optInPartitioning", true]],
thirdPartyPage: TEST_4TH_PARTY_PAGE,
runInPrivateWindow: true,
iframeSandbox: null,
accessRemoval: null,
callbackAfterRemoval: null,
});