Chromium Code Reviews| Index: src/inspector/build/check_injected_script_source.py | 
| diff --git a/src/inspector/build/check_injected_script_source.py b/src/inspector/build/check_injected_script_source.py | 
| new file mode 100644 | 
| index 0000000000000000000000000000000000000000..5c019fb6a3a5b5e6a9962f3ac3c934abcf3773eb | 
| --- /dev/null | 
| +++ b/src/inspector/build/check_injected_script_source.py | 
| @@ -0,0 +1,84 @@ | 
| +#!/usr/bin/env python | 
| 
 
Michael Achenbach
2016/09/28 09:54:05
Could you add a note where those file are copied f
 
kozy
2016/09/28 23:38:46
I added a comment and will remove this as soon as
 
 | 
| +# Copyright (c) 2014 Google Inc. All rights reserved. | 
| +# | 
| +# Redistribution and use in source and binary forms, with or without | 
| +# modification, are permitted provided that the following conditions are | 
| +# met: | 
| +# | 
| +# * Redistributions of source code must retain the above copyright | 
| +# notice, this list of conditions and the following disclaimer. | 
| +# * Redistributions in binary form must reproduce the above | 
| +# copyright notice, this list of conditions and the following disclaimer | 
| +# in the documentation and/or other materials provided with the | 
| +# distribution. | 
| +# * Neither the name of Google Inc. nor the names of its | 
| +# contributors may be used to endorse or promote products derived from | 
| +# this software without specific prior written permission. | 
| +# | 
| +# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS | 
| +# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT | 
| +# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR | 
| +# A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT | 
| +# OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, | 
| +# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT | 
| +# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, | 
| +# DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY | 
| +# THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT | 
| +# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE | 
| +# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. | 
| + | 
| +import re | 
| +import sys | 
| +import os | 
| + | 
| + | 
| +def validate_injected_script(fileName): | 
| + f = open(fileName, "r") | 
| + lines = f.readlines() | 
| + f.close() | 
| + | 
| + proto_functions = "|".join([ | 
| + # Array.prototype.* | 
| + "concat", "every", "filter", "forEach", "indexOf", "join", "lastIndexOf", "map", "pop", | 
| + "push", "reduce", "reduceRight", "reverse", "shift", "slice", "some", "sort", "splice", "toLocaleString", "toString", "unshift", | 
| + # Function.prototype.* | 
| + "apply", "bind", "call", "isGenerator", "toSource", | 
| + # Object.prototype.* | 
| + "toString", | 
| + ]) | 
| + | 
| + global_functions = "|".join([ | 
| + "eval", "uneval", "isFinite", "isNaN", "parseFloat", "parseInt", "decodeURI", "decodeURIComponent", | 
| + "encodeURI", "encodeURIComponent", "escape", "unescape", "Map", "Set" | 
| + ]) | 
| + | 
| + # Black list: | 
| + # - instanceof, since e.g. "obj instanceof Error" may throw if Error is overridden and is not a function | 
| + # - Object.prototype.toString() | 
| + # - Array.prototype.* | 
| + # - Function.prototype.* | 
| + # - Math.* | 
| + # - Global functions | 
| + black_list_call_regex = re.compile(r"\sinstanceof\s+\w*|\bMath\.\w+\(|(?<!InjectedScriptHost)\.(" + proto_functions + r")\(|[^\.]\b(" + global_functions + r")\(") | 
| + | 
| + errors_found = False | 
| + for i, line in enumerate(lines): | 
| + if line.find("suppressBlacklist") != -1: | 
| + continue | 
| + for match in re.finditer(black_list_call_regex, line): | 
| + errors_found = True | 
| + print "ERROR: Black listed expression in %s at line %02d column %02d: %s" % (os.path.basename(fileName), i + 1, match.start(), match.group(0)) | 
| + | 
| + if not errors_found: | 
| + print "OK" | 
| + | 
| + | 
| +def main(argv): | 
| + if len(argv) < 2: | 
| + print('ERROR: Usage: %s path/to/injected-script-source.js' % argv[0]) | 
| + return 1 | 
| + | 
| + validate_injected_script(argv[1]) | 
| + | 
| +if __name__ == '__main__': | 
| + sys.exit(main(sys.argv)) |