File: bindings-inject-keys-bypass.any.js

package info (click to toggle)
firefox 145.0-1
  • links: PTS, VCS
  • area: main
  • in suites: sid
  • size: 4,653,344 kB
  • sloc: cpp: 7,594,932; javascript: 6,459,612; ansic: 3,752,905; python: 1,403,433; xml: 629,811; asm: 438,677; java: 186,421; sh: 67,287; makefile: 19,169; objc: 13,086; perl: 12,982; yacc: 4,583; cs: 3,846; pascal: 3,448; lex: 1,720; ruby: 1,003; exp: 762; php: 436; lisp: 258; awk: 247; sql: 66; sed: 54; csh: 10
file content (29 lines) | stat: -rw-r--r-- 1,025 bytes parent folder | download | duplicates (12) 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
 
// META: global=window,worker
// META: title=IndexedDB: ES bindings - Inject a key into a value - Keys bypass setters
// META: script=resources/support-promises.js

'use_strict';

promise_test(async t => {
  const db = await createDatabase(t, db => {
    db.createObjectStore('store');
  });

  let setter_called = false;
  Object.defineProperty(Object.prototype, '10', {
    configurable: true,
    set: value => { setter_called = true; },
  });
  t.add_cleanup(() => { delete Object.prototype['10']; });

  const tx = db.transaction('store', 'readwrite');
  const result = await promiseForRequest(t, tx.objectStore('store').put(
    'value', [0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 'key']));

  assert_false(setter_called,
    'Setter should not be called for key result.');
  assert_true(result.hasOwnProperty('10'),
    'Result should have own-property overriding prototype setter.');
  assert_equals(result[10], 'key',
    'Result should have expected property.');
}, 'Returning keys to script should bypass prototype setters');