/* This Source Code Form is subject to the terms of the Mozilla Public
* License, v. 2.0. If a copy of the MPL was not distributed with this
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
"use strict";
/* import-globals-from head_cache.js */
/* import-globals-from head_cookies.js */
/* import-globals-from head_channels.js */
/* import-globals-from head_servers.js */
function makeChan(uri) {
var principal =
Services.scriptSecurityManager.createContentPrincipalFromOrigin(
"http://example.com"
);
let chan = NetUtil.newChannel({
uri,
loadingPrincipal: principal,
securityFlags: Ci.nsILoadInfo.SEC_ALLOW_CROSS_ORIGIN_INHERITS_SEC_CONTEXT,
contentPolicyType: Ci.nsIContentPolicy.TYPE_OTHER,
}).QueryInterface(Ci.nsIHttpChannel);
chan.loadFlags = Ci.nsIChannel.LOAD_INITIAL_DOCUMENT_URI;
return chan;
}
function inChildProcess() {
return Services.appinfo.processType != Ci.nsIXULRuntime.PROCESS_TYPE_DEFAULT;
}
async
function setup() {
if (!inChildProcess()) {
Services.prefs.setBoolPref(
"browser.opaqueResponseBlocking",
true);
}
let server =
new NodeHTTPServer();
await server.start();
registerCleanupFunction(async () => {
await server.stop();
});
await server.registerPathHandler(
"/dosniff", (req, resp) => {
resp.writeHead(500, {
"Content-Type":
"application/json",
"Set-Cookie":
"mycookie",
});
resp.write(
"good");
resp.end(
"done");
});
await server.registerPathHandler(
"/nosniff", (req, resp) => {
resp.writeHead(500, {
"Content-Type":
"application/msword",
"Set-Cookie":
"mycookie",
});
resp.write(
"good");
resp.end(
"done");
});
return server;
}
async
function test_empty_header(server, doSniff) {
let chan;
if (doSniff) {
chan = makeChan(`${server.origin()}/dosniff`);
}
else {
chan = makeChan(`${server.origin()}/nosniff`);
}
let req = await
new Promise(resolve => {
chan.asyncOpen(
new ChannelListener(resolve,
null, CL_EXPECT_FAILURE));
});
equal(req.status, Cr.NS_BINDING_ABORTED);
equal(req.QueryInterface(Ci.nsIHttpChannel).responseStatus, 500);
req.visitResponseHeaders({
visitHeader:
function visit(_aName, _aValue) {
ok(
false);
},
});
}
add_task(async
function () {
let server = await setup();
await test_empty_header(server,
true);
await test_empty_header(server,
false);
});