/* * Copyright (c) 2010, 2013, Oracle and/or its affiliates. All rights reserved. * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. * * This code is free software; you can redistribute it and/or modify it * under the terms of the GNU General Public License version 2 only, as * published by the Free Software Foundation. Oracle designates this * particular file as subject to the "Classpath" exception as provided * by Oracle in the LICENSE file that accompanied this code. * * This code is distributed in the hope that it will be useful, but WITHOUT * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License * version 2 for more details (a copy is included in the LICENSE file that * accompanied this code). * * You should have received a copy of the GNU General Public License version * 2 along with this work; if not, write to the Free Software Foundation, * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. * * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA * or visit www.oracle.com if you need additional information or have any * questions. */ package jdk.nashorn.internal.runtime.test; import static org.testng.Assert.assertEquals; import static org.testng.Assert.assertTrue; import static org.testng.Assert.fail; import javax.script.ScriptContext; import javax.script.ScriptEngine; import javax.script.ScriptEngineFactory; import javax.script.ScriptEngineManager; import javax.script.ScriptException; import javax.script.SimpleScriptContext; import jdk.nashorn.api.scripting.ClassFilter; import jdk.nashorn.api.scripting.NashornScriptEngineFactory; import jdk.nashorn.internal.runtime.Version; import org.testng.annotations.Test; /** * Tests for trusted client usage of nashorn script engine factory extension API */ @SuppressWarnings("javadoc") public class TrustedScriptEngineTest { @Test public void versionTest() { final ScriptEngineManager m = new ScriptEngineManager(); final ScriptEngine e = m.getEngineByName("nashorn"); assertEquals(e.getFactory().getEngineVersion(), Version.version()); } private static class MyClassLoader extends ClassLoader { // to check if script engine uses the specified class loader private final boolean[] reached = new boolean[1]; @Override protected Class<?> findClass(final String name) throws ClassNotFoundException { // flag that it reached here reached[0] = true; return super.findClass(name); } public boolean reached() { return reached[0]; } } // These are for "private" extension API of NashornScriptEngineFactory that // accepts a ClassLoader and/or command line options. @Test public void factoryClassLoaderTest() { final ScriptEngineManager sm = new ScriptEngineManager(); for (final ScriptEngineFactory fac : sm.getEngineFactories()) { if (fac instanceof NashornScriptEngineFactory) { final NashornScriptEngineFactory nfac = (NashornScriptEngineFactory)fac; final MyClassLoader loader = new MyClassLoader(); // set the classloader as app class loader final ScriptEngine e = nfac.getScriptEngine(loader); try { e.eval("Packages.foo"); // check that the class loader was attempted assertTrue(loader.reached(), "did not reach class loader!"); } catch (final ScriptException se) { se.printStackTrace(); fail(se.getMessage()); } return; } } fail("Cannot find nashorn factory!"); } @Test public void factoryClassLoaderAndOptionsTest() { final ScriptEngineManager sm = new ScriptEngineManager(); for (final ScriptEngineFactory fac : sm.getEngineFactories()) { if (fac instanceof NashornScriptEngineFactory) { final NashornScriptEngineFactory nfac = (NashornScriptEngineFactory)fac; final String[] options = new String[] { "-strict" }; final MyClassLoader loader = new MyClassLoader(); // set the classloader as app class loader final ScriptEngine e = nfac.getScriptEngine(options, loader); try { e.eval("Packages.foo"); // check that the class loader was attempted assertTrue(loader.reached(), "did not reach class loader!"); } catch (final ScriptException se) { se.printStackTrace(); fail(se.getMessage()); } try { // strict mode - delete of a var should throw SyntaxError e.eval("var d = 2; delete d;"); } catch (final ScriptException se) { // check that the error message contains "SyntaxError" assertTrue(se.getMessage().contains("SyntaxError")); } return; } } fail("Cannot find nashorn factory!"); } @Test public void factoryOptionsTest() { final ScriptEngineManager sm = new ScriptEngineManager(); for (final ScriptEngineFactory fac : sm.getEngineFactories()) { if (fac instanceof NashornScriptEngineFactory) { final NashornScriptEngineFactory nfac = (NashornScriptEngineFactory)fac; // specify --no-syntax-extensions flag final String[] options = new String[] { "--no-syntax-extensions" }; final ScriptEngine e = nfac.getScriptEngine(options); try { // try nashorn specific extension e.eval("var f = funtion(x) 2*x;"); fail("should have thrown exception!"); } catch (final Exception ex) { //empty } return; } } fail("Cannot find nashorn factory!"); } @Test /** * Test repeated evals with --loader-per-compile=false * We used to get "class redefinition error". */ public void noLoaderPerCompilerTest() { final ScriptEngineManager sm = new ScriptEngineManager(); for (final ScriptEngineFactory fac : sm.getEngineFactories()) { if (fac instanceof NashornScriptEngineFactory) { final NashornScriptEngineFactory nfac = (NashornScriptEngineFactory)fac; final String[] options = new String[] { "--loader-per-compile=false" }; final ScriptEngine e = nfac.getScriptEngine(options); try { e.eval("2 + 3"); e.eval("4 + 4"); } catch (final ScriptException se) { se.printStackTrace(); fail(se.getMessage()); } return; } } fail("Cannot find nashorn factory!"); } @Test /** * Test that we can use same script name in repeated evals with --loader-per-compile=false * We used to get "class redefinition error" as name was derived from script name. */ public void noLoaderPerCompilerWithSameNameTest() { final ScriptEngineManager sm = new ScriptEngineManager(); for (final ScriptEngineFactory fac : sm.getEngineFactories()) { if (fac instanceof NashornScriptEngineFactory) { final NashornScriptEngineFactory nfac = (NashornScriptEngineFactory)fac; final String[] options = new String[] { "--loader-per-compile=false" }; final ScriptEngine e = nfac.getScriptEngine(options); e.put(ScriptEngine.FILENAME, "test.js"); try { e.eval("2 + 3"); e.eval("4 + 4"); } catch (final ScriptException se) { se.printStackTrace(); fail(se.getMessage()); } return; } } fail("Cannot find nashorn factory!"); } @Test public void globalPerEngineTest() throws ScriptException { final NashornScriptEngineFactory fac = new NashornScriptEngineFactory(); final String[] options = new String[] { "--global-per-engine" }; final ScriptEngine e = fac.getScriptEngine(options); e.eval("function foo() {}"); final ScriptContext newCtx = new SimpleScriptContext(); newCtx.setBindings(e.createBindings(), ScriptContext.ENGINE_SCOPE); // all global definitions shared and so 'foo' should be // visible in new Bindings as well. assertTrue(e.eval("typeof foo", newCtx).equals("function")); e.eval("function bar() {}", newCtx); // bar should be visible in default context assertTrue(e.eval("typeof bar").equals("function")); } @Test public void classFilterTest() throws ScriptException { final NashornScriptEngineFactory fac = new NashornScriptEngineFactory(); final ScriptEngine e = fac.getScriptEngine(new ClassFilter() { @Override public boolean exposeToScripts(final String fullName) { // don't allow anything that is not "java." return fullName.startsWith("java."); } }); assertEquals(e.eval("typeof javax.script.ScriptEngine"), "object"); assertEquals(e.eval("typeof java.util.Vector"), "function"); try { e.eval("Java.type('javax.script.ScriptContext')"); fail("should not reach here"); } catch (final ScriptException | RuntimeException se) { if (! (se.getCause() instanceof ClassNotFoundException)) { fail("ClassNotFoundException expected"); } } } @Test public void classFilterTest2() throws ScriptException { final NashornScriptEngineFactory fac = new NashornScriptEngineFactory(); final ScriptEngine e = fac.getScriptEngine(new String[0], Thread.currentThread().getContextClassLoader(), new ClassFilter() { @Override public boolean exposeToScripts(final String fullName) { // don't allow anything that is not "java." return fullName.startsWith("java."); } }); assertEquals(e.eval("typeof javax.script.ScriptEngine"), "object"); assertEquals(e.eval("typeof java.util.Vector"), "function"); try { e.eval("Java.type('javax.script.ScriptContext')"); fail("should not reach here"); } catch (final ScriptException | RuntimeException se) { if (! (se.getCause() instanceof ClassNotFoundException)) { fail("ClassNotFoundException expected"); } } } @Test public void nullClassFilterTest() { final NashornScriptEngineFactory fac = new NashornScriptEngineFactory(); try { fac.getScriptEngine((ClassFilter)null); fail("should have thrown NPE"); } catch (final NullPointerException e) { //empty } } @Test public void nullClassFilterTest2() { final NashornScriptEngineFactory fac = new NashornScriptEngineFactory(); try { fac.getScriptEngine(new String[0], null, null); fail("should have thrown NPE"); } catch (final NullPointerException e) { //empty } } @Test public void nullArgsTest() { final NashornScriptEngineFactory fac = new NashornScriptEngineFactory(); try { fac.getScriptEngine((String[])null); fail("should have thrown NPE"); } catch (final NullPointerException e) { //empty } } @Test public void nullArgsTest2() { final NashornScriptEngineFactory fac = new NashornScriptEngineFactory(); try { fac.getScriptEngine(null, null, new ClassFilter() { @Override public boolean exposeToScripts(final String name) { return true; } }); fail("should have thrown NPE"); } catch (final NullPointerException e) { //empty } } @Test public void nashornSwallowsConstKeyword() throws Exception { final NashornScriptEngineFactory f = new NashornScriptEngineFactory(); final String[] args = new String[] { "--const-as-var" }; final ScriptEngine engine = f.getScriptEngine(args); final Object ret = engine.eval("" + "(function() {\n" + " const x = 10;\n" + " return x;\n" + "})();" ); assertEquals(ret, 10, "Parsed and executed OK"); } @Test public void evalDefaultFileNameTest() throws ScriptException { final NashornScriptEngineFactory fac = new NashornScriptEngineFactory(); final ScriptEngine engine = fac.getScriptEngine(new String[] { "--verify-code=true" }); // default FILENAME being "<eval>" make sure generated code bytecode verifies. engine.eval("var a = 3;"); } @Test public void evalFileNameWithSpecialCharsTest() throws ScriptException { final NashornScriptEngineFactory fac = new NashornScriptEngineFactory(); final ScriptEngine engine = fac.getScriptEngine(new String[] { "--verify-code=true" }); final ScriptContext ctxt = new SimpleScriptContext(); // use file name with "dangerous" chars. ctxt.setAttribute(ScriptEngine.FILENAME, "<myscript>", ScriptContext.ENGINE_SCOPE); engine.eval("var a = 3;"); ctxt.setAttribute(ScriptEngine.FILENAME, "[myscript]", ScriptContext.ENGINE_SCOPE); engine.eval("var h = 'hello';"); ctxt.setAttribute(ScriptEngine.FILENAME, ";/\\$.", ScriptContext.ENGINE_SCOPE); engine.eval("var foo = 'world';"); // name used by jjs shell tool for the interactive mode ctxt.setAttribute(ScriptEngine.FILENAME, "<shell>", ScriptContext.ENGINE_SCOPE); engine.eval("var foo = 'world';"); } }