/** * @author Kuitos * @since 2020-03-31 */ import { isBoundedFunction } from '../../utils'; import { attachDocProxySymbol } from '../common'; import ProxySandbox from '../proxySandbox'; beforeAll(() => { Object.defineProperty(window, 'mockTop', { value: window, writable: false, configurable: false, enumerable: false }); Object.defineProperty(window, 'mockSafariTop', { get() { return window; }, set() {}, configurable: false, enumerable: false, }); }); test('iterator should be worked the same as the raw window', () => { const { proxy } = new ProxySandbox('unit-test'); expect(Object.keys(proxy)).toEqual(Object.keys(window)); expect(Object.getOwnPropertyNames(proxy)).toEqual(Object.getOwnPropertyNames(window)); // test the iterator order const sandboxKeys = []; // @ts-ignore // eslint-disable-next-line guard-for-in,no-restricted-syntax for (const p in proxy) { sandboxKeys.push(p); } const rawKeys = []; // eslint-disable-next-line guard-for-in,no-restricted-syntax for (const p in window) { rawKeys.push(p); } expect(sandboxKeys).toEqual(rawKeys); (proxy).additionalProp = 'kuitos'; expect(Object.keys(proxy)).toEqual([...Object.keys(window), 'additionalProp']); }); test('window.self & window.window & window.top & window.parent should equals with sandbox', () => { const { proxy } = new ProxySandbox('unit-test'); expect(proxy.self).toBe(proxy); expect(proxy.window).toBe(proxy); expect((proxy).mockTop).toBe(proxy); expect((proxy).mockSafariTop).toBe(proxy); expect(proxy.top).toBe(proxy); expect(proxy.parent).toBe(proxy); }); test('allow window.top & window.parent to escape sandbox while in iframe', () => { // change window.parent to cheat ProxySandbox is in iframe Object.defineProperty(window, 'parent', { value: 'parent' }); Object.defineProperty(window, 'top', { value: 'top' }); const { proxy } = new ProxySandbox('iframe-test'); expect(proxy.top).toBe('top'); expect(proxy.parent).toBe('parent'); }); test('eval should never be represented', () => { const { proxy } = new ProxySandbox('eval-test'); // @ts-ignore window.proxy = proxy; const code = ';(function(window){with(window){ var testProp = function(wrequire){ eval("window.testEval=wrequire()"); }; testProp(() => "kuitos");}})(window.proxy)'; // eslint-disable-next-line no-eval const geval = eval; geval(code); // @ts-ignore expect(proxy.testEval).toBe('kuitos'); // @ts-ignore expect(window.testEval).toBeUndefined(); }); test('hasOwnProperty should works well', () => { const { proxy } = new ProxySandbox('unit-test'); (proxy).testName = 'kuitos'; expect((proxy).testName).toBe('kuitos'); expect((window).testName).toBeUndefined(); expect(proxy.hasOwnProperty('testName')).toBeTruthy(); expect(window.hasOwnProperty('testName')).toBeFalsy(); expect(Object.getOwnPropertyDescriptor(proxy, 'testName')).toEqual({ value: 'kuitos', configurable: true, enumerable: true, writable: true, }); }); test('descriptor of non-configurable and non-enumerable property existed in raw window should be the same after modified in sandbox', () => { Object.defineProperty(window, 'nonConfigurableProp', { configurable: false, writable: true }); // eslint-disable-next-line getter-return Object.defineProperty(window, 'nonConfigurablePropWithAccessor', { configurable: false, get() {}, set() {} }); Object.defineProperty(window, 'enumerableProp', { enumerable: true, writable: true }); Object.defineProperty(window, 'nonEnumerableProp', { enumerable: false, writable: true }); const { proxy } = new ProxySandbox('unit-test'); (proxy).nonConfigurableProp = (window).nonConfigurableProp; (proxy).nonConfigurablePropWithAccessor = 123; expect((proxy).nonConfigurablePropWithAccessor).toBe(undefined); expect(Object.keys(proxy)).toEqual(Object.keys(window)); expect(Object.getOwnPropertyDescriptor(proxy, 'nonConfigurableProp')).toEqual( Object.getOwnPropertyDescriptor(window, 'nonConfigurableProp'), ); (proxy).enumerableProp = 123; (proxy).nonEnumerableProp = 456; expect((proxy).enumerableProp).toBe(123); expect((proxy).nonEnumerableProp).toBe(456); expect(Object.keys(proxy)).toEqual(Object.keys(window)); expect(Object.keys(proxy).includes('nonEnumerableProp')).toBeFalsy(); expect(Object.keys(proxy).includes('enumerableProp')).toBeTruthy(); expect(Object.getOwnPropertyDescriptor(proxy, 'nonEnumerableProp')).toEqual({ enumerable: false, writable: true, configurable: false, value: 456, }); expect(Object.getOwnPropertyDescriptor(window, 'nonEnumerableProp')).toEqual({ enumerable: false, writable: true, configurable: false, }); }); test('A property cannot be reported as non-configurable, if it does not exists as an own property of the target object', () => { const { proxy } = new ProxySandbox('non-configurable'); Object.defineProperty(window, 'nonConfigurablePropAfterSandboxCreated', { value: 'test', configurable: false }); const descriptor = Object.getOwnPropertyDescriptor(proxy, 'nonConfigurablePropAfterSandboxCreated'); expect(descriptor?.configurable).toBeTruthy(); }); test('property added by Object.defineProperty should works as expect', () => { const { proxy } = new ProxySandbox('object-define-property-test'); let v: any; const descriptor = { get(): any { return v; }, set(value: any) { v = value; }, }; Object.defineProperty(proxy, 'g_history', descriptor); (proxy).g_history = 'window.g_history'; expect((proxy).g_history).toBe('window.g_history'); expect('g_history' in proxy).toBeTruthy(); expect(Object.keys(proxy)).toEqual(Object.keys(window)); expect(Object.getOwnPropertyDescriptor(proxy, 'g_history')).toEqual({ ...descriptor, configurable: false, enumerable: false, }); }); test('defineProperty should added to the target where its descriptor from', () => { Object.defineProperty(window, 'propertyInNativeWindow', { get(this: any) { // distinguish it from internal target or raw window with property length const fromProxyInternalTarget = Object.keys(this).length !== Object.keys(window).length; if (fromProxyInternalTarget) throw new TypeError('illegal invocation'); return 'ifAccessByInternalTargetWillCauseIllegalInvocation'; }, set() {}, configurable: true, enumerable: false, }); // @ts-ignore expect(window.propertyInNativeWindow).toBe('ifAccessByInternalTargetWillCauseIllegalInvocation'); const { proxy } = new ProxySandbox('object-define-property-target-test'); const eventDescriptor = Object.getOwnPropertyDescriptor(proxy, 'propertyInNativeWindow'); Object.defineProperty(proxy, 'propertyInNativeWindow', eventDescriptor!); expect((proxy).propertyInNativeWindow).toBe('ifAccessByInternalTargetWillCauseIllegalInvocation'); }); test('hasOwnProperty should always returns same reference', () => { const proxy = new ProxySandbox('hasOwnProperty-test').proxy as any; proxy.testA = {}; proxy.testB = {}; expect(proxy.testA.hasOwnProperty).toBe(proxy.testB.hasOwnProperty); }); test('document accessing should modify the attachDocProxySymbol value every time', () => { const proxy1 = new ProxySandbox('doc-access-test1').proxy; const proxy2 = new ProxySandbox('doc-access-test2').proxy; const d1 = proxy1.document; expect(d1[attachDocProxySymbol]).toBe(proxy1); const d2 = proxy2.document; expect(d2[attachDocProxySymbol]).toBe(proxy2); expect(d1).toBe(d2); expect(d1).toBe(document); }); test('document attachDocProxySymbol mark should be remove before next tasl', done => { const { proxy } = new ProxySandbox('doc-symbol'); const d1 = proxy.document; expect(d1[attachDocProxySymbol]).toBe(proxy); setTimeout(() => { expect(d1[attachDocProxySymbol]).toBeUndefined(); done(); }); }); test('document should work well with MutationObserver', done => { const docProxy = new ProxySandbox('doc').proxy; const observer = new MutationObserver(mutations => { if (mutations[0]) { expect(mutations[0].target).toBe(document.body); observer.disconnect(); done(); } }); observer.observe(docProxy.document, { attributes: true, subtree: true, childList: true, }); docProxy.document.body.innerHTML = '
'; }); test('bounded function should not be rebounded', () => { const proxy = new ProxySandbox('bound-fn-test').proxy as any; const fn = () => {}; const boundedFn = fn.bind(null); proxy.fn1 = fn; proxy.fn2 = boundedFn; expect(proxy.fn1 === fn).toBeFalsy(); expect(proxy.fn2 === boundedFn).toBeTruthy(); expect(isBoundedFunction(proxy.fn1)).toBeTruthy(); }); test('some native window property was defined with getter in safari and firefox, and they will check the caller source', () => { Object.defineProperty(window, 'mockSafariGetterProperty', { get(this: Window) { // distinguish it from internal target or raw window with property length const fromProxyInternalTarget = Object.keys(this).length !== Object.keys(window).length; if (fromProxyInternalTarget) { throw new TypeError('The Window.mockSafariGetterProperty getter can only be used on instances of Window'); } return 'getterPropertyInSafariWindow'; }, set() {}, configurable: false, enumerable: false, }); expect((window).mockSafariGetterProperty).toBe('getterPropertyInSafariWindow'); const { proxy } = new ProxySandbox('object-define-property-target-test'); expect((proxy).mockSafariGetterProperty).toBe('getterPropertyInSafariWindow'); });