Chromium Code Reviews| Index: src/inspector/build/check_injected_script_source.py |
| diff --git a/src/inspector/build/check_injected_script_source.py b/src/inspector/build/check_injected_script_source.py |
| new file mode 100644 |
| index 0000000000000000000000000000000000000000..5c019fb6a3a5b5e6a9962f3ac3c934abcf3773eb |
| --- /dev/null |
| +++ b/src/inspector/build/check_injected_script_source.py |
| @@ -0,0 +1,84 @@ |
| +#!/usr/bin/env python |
|
Michael Achenbach
2016/09/28 09:54:05
Could you add a note where those file are copied f
kozy
2016/09/28 23:38:46
I added a comment and will remove this as soon as
|
| +# Copyright (c) 2014 Google Inc. All rights reserved. |
| +# |
| +# Redistribution and use in source and binary forms, with or without |
| +# modification, are permitted provided that the following conditions are |
| +# met: |
| +# |
| +# * Redistributions of source code must retain the above copyright |
| +# notice, this list of conditions and the following disclaimer. |
| +# * Redistributions in binary form must reproduce the above |
| +# copyright notice, this list of conditions and the following disclaimer |
| +# in the documentation and/or other materials provided with the |
| +# distribution. |
| +# * Neither the name of Google Inc. nor the names of its |
| +# contributors may be used to endorse or promote products derived from |
| +# this software without specific prior written permission. |
| +# |
| +# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS |
| +# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT |
| +# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR |
| +# A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT |
| +# OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, |
| +# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT |
| +# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, |
| +# DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY |
| +# THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT |
| +# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE |
| +# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
| + |
| +import re |
| +import sys |
| +import os |
| + |
| + |
| +def validate_injected_script(fileName): |
| + f = open(fileName, "r") |
| + lines = f.readlines() |
| + f.close() |
| + |
| + proto_functions = "|".join([ |
| + # Array.prototype.* |
| + "concat", "every", "filter", "forEach", "indexOf", "join", "lastIndexOf", "map", "pop", |
| + "push", "reduce", "reduceRight", "reverse", "shift", "slice", "some", "sort", "splice", "toLocaleString", "toString", "unshift", |
| + # Function.prototype.* |
| + "apply", "bind", "call", "isGenerator", "toSource", |
| + # Object.prototype.* |
| + "toString", |
| + ]) |
| + |
| + global_functions = "|".join([ |
| + "eval", "uneval", "isFinite", "isNaN", "parseFloat", "parseInt", "decodeURI", "decodeURIComponent", |
| + "encodeURI", "encodeURIComponent", "escape", "unescape", "Map", "Set" |
| + ]) |
| + |
| + # Black list: |
| + # - instanceof, since e.g. "obj instanceof Error" may throw if Error is overridden and is not a function |
| + # - Object.prototype.toString() |
| + # - Array.prototype.* |
| + # - Function.prototype.* |
| + # - Math.* |
| + # - Global functions |
| + black_list_call_regex = re.compile(r"\sinstanceof\s+\w*|\bMath\.\w+\(|(?<!InjectedScriptHost)\.(" + proto_functions + r")\(|[^\.]\b(" + global_functions + r")\(") |
| + |
| + errors_found = False |
| + for i, line in enumerate(lines): |
| + if line.find("suppressBlacklist") != -1: |
| + continue |
| + for match in re.finditer(black_list_call_regex, line): |
| + errors_found = True |
| + print "ERROR: Black listed expression in %s at line %02d column %02d: %s" % (os.path.basename(fileName), i + 1, match.start(), match.group(0)) |
| + |
| + if not errors_found: |
| + print "OK" |
| + |
| + |
| +def main(argv): |
| + if len(argv) < 2: |
| + print('ERROR: Usage: %s path/to/injected-script-source.js' % argv[0]) |
| + return 1 |
| + |
| + validate_injected_script(argv[1]) |
| + |
| +if __name__ == '__main__': |
| + sys.exit(main(sys.argv)) |