File: file_bug1777572.html

package info (click to toggle)
firefox-esr 128.14.0esr-1~deb12u1
  • links: PTS, VCS
  • area: main
  • in suites: bookworm
  • size: 4,230,248 kB
  • sloc: cpp: 7,104,262; javascript: 6,088,450; ansic: 3,654,017; python: 1,212,326; xml: 594,604; asm: 420,654; java: 182,969; sh: 71,124; makefile: 20,739; perl: 13,449; objc: 12,399; yacc: 4,583; cs: 3,846; pascal: 2,973; lex: 1,720; ruby: 1,194; exp: 762; php: 436; lisp: 258; awk: 247; sql: 66; sed: 54; csh: 10
file content (43 lines) | stat: -rw-r--r-- 1,388 bytes parent folder | download | duplicates (18) 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
 
<!DOCTYPE html>
<html>
<head>
    <meta http-equiv="Content-Security-Policy" content="img-src https://*;">
    <script>
      async function timeout (cmd) {
        const timer = new Promise((resolve, reject) => {
          const id = setTimeout(() => {
            clearTimeout(id)
            reject(new Error('Promise timed out!'))
          }, 750)
        })
        return Promise.race([cmd, timer])
      }

      let ourOpener = window.opener;

      if (location.search.includes("close")) {
        window.close();
      }

      document.addEventListener('DOMContentLoaded', async () => {
        const frame = document.createElementNS('http://www.w3.org/1999/xhtml', 'frame');
        const image = document.createElementNS('http://www.w3.org/2000/svg', 'image');
        document.documentElement.appendChild(frame)
        image.setAttribute('href', 'a.png')
        for (let i = 0; i < 5; ++i) {
          try { await timeout(image.decode()) } catch (e) {}
        }
        let w = window.open();
        // Need to run SpecialPowers in the newly opened window to avoid
        // .wrap throwing because of dead objects.
        let csp = w.eval("SpecialPowers.wrap(document).cspJSON;");
        ourOpener.postMessage(csp, "*");
        w.close();

        if (!location.search.includes("close")) {
          window.close();
        }
      })
    </script>
</head>
</html>