| Index: src/inspector/build/check_injected_script_source.py
|
| diff --git a/src/inspector/build/check_injected_script_source.py b/src/inspector/build/check_injected_script_source.py
|
| new file mode 100644
|
| index 0000000000000000000000000000000000000000..0f2509cd8c5cac14a82704db7444f2609780adbc
|
| --- /dev/null
|
| +++ b/src/inspector/build/check_injected_script_source.py
|
| @@ -0,0 +1,88 @@
|
| +#!/usr/bin/env python
|
| +# Copyright (c) 2014 Google Inc. All rights reserved.
|
| +#
|
| +# Redistribution and use in source and binary forms, with or without
|
| +# modification, are permitted provided that the following conditions are
|
| +# met:
|
| +#
|
| +# * Redistributions of source code must retain the above copyright
|
| +# notice, this list of conditions and the following disclaimer.
|
| +# * Redistributions in binary form must reproduce the above
|
| +# copyright notice, this list of conditions and the following disclaimer
|
| +# in the documentation and/or other materials provided with the
|
| +# distribution.
|
| +# * Neither the name of Google Inc. nor the names of its
|
| +# contributors may be used to endorse or promote products derived from
|
| +# this software without specific prior written permission.
|
| +#
|
| +# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
|
| +# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
|
| +# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
|
| +# A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
|
| +# OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
| +# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
|
| +# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
|
| +# DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
|
| +# THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
|
| +# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
|
| +# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
| +#
|
| +# Copied from blink:
|
| +# WebKit/Source/devtools/scripts/check_injected_script_source.py
|
| +#
|
| +
|
| +import re
|
| +import sys
|
| +import os
|
| +
|
| +
|
| +def validate_injected_script(fileName):
|
| + f = open(fileName, "r")
|
| + lines = f.readlines()
|
| + f.close()
|
| +
|
| + proto_functions = "|".join([
|
| + # Array.prototype.*
|
| + "concat", "every", "filter", "forEach", "indexOf", "join", "lastIndexOf", "map", "pop",
|
| + "push", "reduce", "reduceRight", "reverse", "shift", "slice", "some", "sort", "splice", "toLocaleString", "toString", "unshift",
|
| + # Function.prototype.*
|
| + "apply", "bind", "call", "isGenerator", "toSource",
|
| + # Object.prototype.*
|
| + "toString",
|
| + ])
|
| +
|
| + global_functions = "|".join([
|
| + "eval", "uneval", "isFinite", "isNaN", "parseFloat", "parseInt", "decodeURI", "decodeURIComponent",
|
| + "encodeURI", "encodeURIComponent", "escape", "unescape", "Map", "Set"
|
| + ])
|
| +
|
| + # Black list:
|
| + # - instanceof, since e.g. "obj instanceof Error" may throw if Error is overridden and is not a function
|
| + # - Object.prototype.toString()
|
| + # - Array.prototype.*
|
| + # - Function.prototype.*
|
| + # - Math.*
|
| + # - Global functions
|
| + black_list_call_regex = re.compile(r"\sinstanceof\s+\w*|\bMath\.\w+\(|(?<!InjectedScriptHost)\.(" + proto_functions + r")\(|[^\.]\b(" + global_functions + r")\(")
|
| +
|
| + errors_found = False
|
| + for i, line in enumerate(lines):
|
| + if line.find("suppressBlacklist") != -1:
|
| + continue
|
| + for match in re.finditer(black_list_call_regex, line):
|
| + errors_found = True
|
| + print "ERROR: Black listed expression in %s at line %02d column %02d: %s" % (os.path.basename(fileName), i + 1, match.start(), match.group(0))
|
| +
|
| + if not errors_found:
|
| + print "OK"
|
| +
|
| +
|
| +def main(argv):
|
| + if len(argv) < 2:
|
| + print('ERROR: Usage: %s path/to/injected-script-source.js' % argv[0])
|
| + return 1
|
| +
|
| + validate_injected_script(argv[1])
|
| +
|
| +if __name__ == '__main__':
|
| + sys.exit(main(sys.argv))
|
|
|