unsafe_browser.rb 9.78 KB
Newer Older
1
When /^I see and accept the Unsafe Browser start verification$/ do
2
  next if @skip_steps_while_restoring_background
kytv's avatar
kytv committed
3
  @screen.wait('GnomeQuestionDialogIcon.png', 30)
4 5 6
  @screen.type(Sikuli::Key.ESC)
end

7
def supported_torbrowser_languages
8
  langs = Array.new
9 10
  exts = @vm.execute_successfully(
    "find /usr/local/share/tor-browser-extensions -maxdepth 1 -name 'langpack*.xpi' -printf \"%f\n\"").stdout
11 12 13 14 15

  # Some of the TBB languages are shipped with both a language and country code, e.g. es-ES.
  # We'll only keep track of the language code and let `guess_best_tor_browser_locale`
  # try to get by with our approximated locales.
  supported_langs = exts.scan(/langpack-([a-z]+).*/).flatten
16
  locales = @vm.execute_successfully(
kytv's avatar
kytv committed
17
    "find /usr/lib/locale -maxdepth 1 -name '*.utf8' -printf \"%f\n\"").stdout.split
18 19 20

  # Determine a valid locale for each language that we want to test.
  supported_langs.each do |lang|
kytv's avatar
kytv committed
21 22
    # If a language shipped by TBB is not a supported system locale (e.g. 'vi'),
    # 'find(nomatch)' will use the locale xx_XX for language 'xx'.
kytv's avatar
kytv committed
23
    nomatch = proc { "#{lang}_#{lang.upcase}.utf8" }
24
    langs << locales.find(nomatch) { |l| l.match(/^#{lang}/) }
25 26 27 28
  end
  return langs
end

29 30
Then /^I start the Unsafe Browser in the "([^"]+)" locale$/ do |loc|
  next if @skip_steps_while_restoring_background
31
  step "I run \"LANG=#{loc} LC_ALL=#{loc} sudo unsafe-browser\" in GNOME Terminal"
32
  step "I see and accept the Unsafe Browser start verification"
33 34
end

35 36
Then /^the Unsafe Browser works in all supported languages$/ do
  next if @skip_steps_while_restoring_background
37
  failed = Array.new
kytv's avatar
kytv committed
38
  supported_torbrowser_languages.each do |lang|
39
    step "I start the Unsafe Browser in the \"#{lang}\" locale"
40 41 42 43 44 45
    begin
      step "the Unsafe Browser has started"
    rescue RuntimeError
      failed << lang
      next
    end
46 47 48
    step "I close the Unsafe Browser"
    step "the Unsafe Browser chroot is torn down"
  end
49
  assert(failed.empty?, "Unsafe Browser failed to launch in the following locale(s): #{failed.join(', ')}")
50 51
end

52 53
Then /^I see the Unsafe Browser start notification and wait for it to close$/ do
  next if @skip_steps_while_restoring_background
54
  notification_helper('UnsafeBrowserStartNotification.png', 30)
55 56 57
  @screen.waitVanish("UnsafeBrowserStartNotification.png", 10)
end

58
Then /^the Unsafe Browser has started$/ do
59
  next if @skip_steps_while_restoring_background
60
  @screen.wait("UnsafeBrowserHomepage.png", 360)
61 62
end

63 64
Then /^the Unsafe Browser has no add-ons installed$/ do
  next if @skip_steps_while_restoring_background
65 66
  step "I open the address \"about:addons\" in the Unsafe Browser"
  step "I see \"UnsafeBrowserNoAddons.png\" after at most 30 seconds"
67 68
end

69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117
Then /^the Unsafe Browser has only Firefox's default bookmarks configured$/ do
  next if @skip_steps_while_restoring_background
  info = xul_application_info("Unsafe Browser")
  # "Show all bookmarks"
  @screen.type("o", Sikuli::KeyModifier.SHIFT + Sikuli::KeyModifier.CTRL)
  @screen.wait_and_click("UnsafeBrowserExportBookmarksButton.png", 20)
  @screen.wait_and_click("UnsafeBrowserExportBookmarksMenuEntry.png", 20)
  @screen.wait("UnsafeBrowserExportBookmarksSavePrompt.png", 20)
  path = "/home/#{info[:user]}/bookmarks"
  @screen.type(path + Sikuli::Key.ENTER)
  chroot_path = "#{info[:chroot]}/#{path}.json"
  try_for(10) { @vm.file_exist?(chroot_path) }
  dump = JSON.load(@vm.file_content(chroot_path))

  def check_bookmarks_helper(a)
    mozilla_uris_counter = 0
    places_uris_counter = 0
    a.each do |h|
      h.each_pair do |k, v|
        if k == "children"
          m, p = check_bookmarks_helper(v)
          mozilla_uris_counter += m
          places_uris_counter += p
        elsif k == "uri"
          uri = v
          if uri.match("^https://www\.mozilla\.org/")
            mozilla_uris_counter += 1
          elsif uri.match("^place:(sort|folder|type)=")
            places_uris_counter += 1
          else
            raise "Unexpected Unsafe Browser bookmark for '#{uri}'"
          end
        end
      end
    end
    return [mozilla_uris_counter, places_uris_counter]
  end

  mozilla_uris_counter, places_uris_counter =
    check_bookmarks_helper(dump["children"])
  assert_equal(5, mozilla_uris_counter,
               "Unexpected number (#{mozilla_uris_counter}) of mozilla " \
               "bookmarks")
  assert_equal(3, places_uris_counter,
               "Unexpected number (#{places_uris_counter}) of places " \
               "bookmarks")
  @screen.type(Sikuli::Key.F4, Sikuli::KeyModifier.ALT)
end

118
Then /^the Unsafe Browser has a red theme$/ do
119
  next if @skip_steps_while_restoring_background
120 121 122 123
  @screen.wait("UnsafeBrowserRedTheme.png", 10)
end

Then /^the Unsafe Browser shows a warning as its start page$/ do
124
  next if @skip_steps_while_restoring_background
125 126 127 128
  @screen.wait("UnsafeBrowserStartPage.png", 10)
end

When /^I start the Unsafe Browser$/ do
129
  next if @skip_steps_while_restoring_background
130
  step 'I start "UnsafeBrowser" via the GNOME "Internet" applications menu'
131 132 133 134 135
end

When /^I successfully start the Unsafe Browser$/ do
  next if @skip_steps_while_restoring_background
  step "I start the Unsafe Browser"
136
  step "I see and accept the Unsafe Browser start verification"
137
  step "I see the Unsafe Browser start notification and wait for it to close"
138
  step "the Unsafe Browser has started"
139 140 141
end

Then /^I see a warning about another instance already running$/ do
142
  next if @skip_steps_while_restoring_background
143 144 145
  @screen.wait('UnsafeBrowserWarnAlreadyRunning.png', 10)
end

Tails developers's avatar
Tails developers committed
146
When /^I close the Unsafe Browser$/ do
147
  next if @skip_steps_while_restoring_background
148
  @screen.type("q", Sikuli::KeyModifier.CTRL)
149 150
end

151 152
Then /^I see the Unsafe Browser stop notification$/ do
  next if @skip_steps_while_restoring_background
153
  notification_helper('UnsafeBrowserStopNotification.png', 20)
154 155 156
  @screen.waitVanish('UnsafeBrowserStopNotification.png', 10)
end

157
Then /^I can start the Unsafe Browser again$/ do
158
  next if @skip_steps_while_restoring_background
159 160 161
  step "I start the Unsafe Browser"
end

162
Then /^I cannot configure the Unsafe Browser to use any local proxies$/ do
163
  next if @skip_steps_while_restoring_background
164 165 166 167 168
  socks_proxy = 'c' # Alt+c for socks proxy
  no_proxy    = 'y' # Alt+y for no proxy
  proxies = [[socks_proxy, 9050],
             [socks_proxy, 9061],
             [socks_proxy, 9062],
169
             [socks_proxy, 9150],
170 171 172 173 174 175
             [no_proxy,       0]]

  proxies.each do |proxy|
    proxy_type = proxy[0]
    proxy_port = proxy[1]

176 177
    @screen.hide_cursor

178
    # Open proxy settings and select manual proxy configuration
179 180
    @screen.click('UnsafeBrowserMenuButton.png')
    @screen.wait_and_click('UnsafeBrowserPreferencesButton.png', 10)
181 182 183 184 185 186
    @screen.wait_and_click('UnsafeBrowserAdvancedSettingsButton.png', 10)
    # Beyond the first iteration, the network tab will already be selected
    hit, _ = @screen.waitAny(['UnsafeBrowserNetworkTabAlreadySelected.png',
                              'UnsafeBrowserNetworkTab.png'], 10)
    @screen.click(hit) if hit == 'UnsafeBrowserNetworkTab.png'
    @screen.wait_and_click('UnsafeBrowserNetworkTabSettingsButton.png', 10)
187
    @screen.wait('UnsafeBrowserProxySettings.png', 10)
188
    @screen.type("m", Sikuli::KeyModifier.ALT)
189 190

    # Configure the proxy
191 192
    @screen.type(proxy_type, Sikuli::KeyModifier.ALT)  # Select correct proxy type
    @screen.type("127.0.0.1" + Sikuli::Key.TAB + "#{proxy_port}") if proxy_type != no_proxy
193

Tails developers's avatar
Tails developers committed
194
    # Close settings
195
    @screen.type(Sikuli::Key.ENTER)
196 197
#    @screen.waitVanish('UnsafeBrowserProxySettings.png', 10)
    sleep 0.5
198 199 200 201 202 203 204 205 206 207

    # Test that the proxy settings work as they should
    step "I open the address \"https://check.torproject.org\" in the Unsafe Browser"
    if proxy_type == no_proxy
      @screen.wait('UnsafeBrowserTorCheckFail.png', 60)
    else
      @screen.wait('UnsafeBrowserProxyRefused.png', 60)
    end
  end
end
208

209 210 211 212
Then /^the Unsafe Browser has no proxy configured$/ do
  next if @skip_steps_while_restoring_background
  @screen.click('UnsafeBrowserMenuButton.png')
  @screen.wait_and_click('UnsafeBrowserPreferencesButton.png', 10)
213
  @screen.wait_and_click('UnsafeBrowserAdvancedSettingsButton.png', 10)
214
  @screen.wait_and_click('UnsafeBrowserNetworkTab.png', 10)
215
  @screen.wait_and_click('UnsafeBrowserNetworkTabSettingsButton.png', 10)    
216 217 218
  @screen.wait('UnsafeBrowserProxySettings.png', 10)
  @screen.wait('UnsafeBrowserNoProxySelected.png', 10)
  @screen.type(Sikuli::Key.F4, Sikuli::KeyModifier.ALT)
219
  @screen.type("w", Sikuli::KeyModifier.CTRL)
220 221
end

222 223 224 225
Then /^the Unsafe Browser complains that no DNS server is configured$/ do
  next if @skip_steps_while_restoring_background
  @screen.wait("UnsafeBrowserDNSError.png", 30)
end
226 227 228 229 230 231 232 233

Then /^I configure the Unsafe Browser to check for updates more frequently$/ do
  next if @skip_steps_while_restoring_background
  prefs = '/usr/share/tails/unsafe-browser/prefs.js'
  @vm.file_append(prefs, 'pref("app.update.idletime", 1);')
  @vm.file_append(prefs, 'pref("app.update.promptWaitTime", 1);')
  @vm.file_append(prefs, 'pref("app.update.interval", 5);')
end
234 235 236 237 238 239

But /^checking for updates is disabled in the Unsafe Browser's configuration$/ do
  next if @skip_steps_while_restoring_background
  prefs = '/usr/share/tails/unsafe-browser/prefs.js'
  assert(@vm.file_content(prefs).include?('pref("app.update.enabled", false)'))
end
240 241 242 243 244 245 246 247

Then /^the clearnet user has (|not )sent packets out to the Internet$/ do |sent|
  next if @skip_steps_while_restoring_background
  pkts = 0
  uid = @vm.execute_successfully("id -u clearnet").stdout.chomp.to_i
  iptables_output = @vm.execute_successfully("iptables -vnL").stdout.chomp
  output_chain = iptables_parse(iptables_output)["OUTPUT"]
  output_chain["rules"].each do |rule|
Tails developers's avatar
Tails developers committed
248
    if /owner UID match \b#{uid}\b/.match(rule["extra"])
249
      pkts += rule["pkts"]
250 251 252 253 254 255 256 257 258 259
    end
  end

  case sent
  when ''
    assert(pkts > 0, "Packets have not gone out to the internet.")
  when 'not'
    assert_equal(pkts, 0, "Packets have gone out to the internet.")
  end
end