unsafe_browser.rb 9.85 KB
Newer Older
1
When /^I see and accept the Unsafe Browser start verification$/ do
2
  next if @skip_steps_while_restoring_background
kytv's avatar
kytv committed
3
  @screen.wait('GnomeQuestionDialogIcon.png', 30)
4 5 6
  @screen.type(Sikuli::Key.ESC)
end

7
def supported_torbrowser_languages
8
  langs = Array.new
9 10
  exts = @vm.execute_successfully(
    "find /usr/local/share/tor-browser-extensions -maxdepth 1 -name 'langpack*.xpi' -printf \"%f\n\"").stdout
11 12 13 14 15

  # Some of the TBB languages are shipped with both a language and country code, e.g. es-ES.
  # We'll only keep track of the language code and let `guess_best_tor_browser_locale`
  # try to get by with our approximated locales.
  supported_langs = exts.scan(/langpack-([a-z]+).*/).flatten
16
  locales = @vm.execute_successfully(
kytv's avatar
kytv committed
17
    "find /usr/lib/locale -maxdepth 1 -name '*.utf8' -printf \"%f\n\"").stdout.split
18 19 20

  # Determine a valid locale for each language that we want to test.
  supported_langs.each do |lang|
kytv's avatar
kytv committed
21 22
    # If a language shipped by TBB is not a supported system locale (e.g. 'vi'),
    # 'find(nomatch)' will use the locale xx_XX for language 'xx'.
kytv's avatar
kytv committed
23
    nomatch = proc { "#{lang}_#{lang.upcase}.utf8" }
24
    langs << locales.find(nomatch) { |l| l.match(/^#{lang}/) }
25 26 27 28
  end
  return langs
end

29 30
Then /^I start the Unsafe Browser in the "([^"]+)" locale$/ do |loc|
  next if @skip_steps_while_restoring_background
31
  step "I run \"LANG=#{loc} LC_ALL=#{loc} sudo unsafe-browser\" in GNOME Terminal"
32
  step "I see and accept the Unsafe Browser start verification"
33 34
end

35 36
Then /^the Unsafe Browser works in all supported languages$/ do
  next if @skip_steps_while_restoring_background
37
  failed = Array.new
kytv's avatar
kytv committed
38
  supported_torbrowser_languages.each do |lang|
39
    step "I start the Unsafe Browser in the \"#{lang}\" locale"
40 41 42 43 44 45
    begin
      step "the Unsafe Browser has started"
    rescue RuntimeError
      failed << lang
      next
    end
46 47 48
    step "I close the Unsafe Browser"
    step "the Unsafe Browser chroot is torn down"
  end
49
  assert(failed.empty?, "Unsafe Browser failed to launch in the following locale(s): #{failed.join(', ')}")
50 51
end

52 53
Then /^I see the Unsafe Browser start notification and wait for it to close$/ do
  next if @skip_steps_while_restoring_background
54
  notification_helper('UnsafeBrowserStartNotification.png', 30)
55 56 57
  @screen.waitVanish("UnsafeBrowserStartNotification.png", 10)
end

58
Then /^the Unsafe Browser has started$/ do
59
  next if @skip_steps_while_restoring_background
60
  @screen.wait("UnsafeBrowserHomepage.png", 360)
61 62
end

63 64
Then /^the Unsafe Browser has no add-ons installed$/ do
  next if @skip_steps_while_restoring_background
65 66
  step "I open the address \"about:addons\" in the Unsafe Browser"
  step "I see \"UnsafeBrowserNoAddons.png\" after at most 30 seconds"
67 68
end

69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117
Then /^the Unsafe Browser has only Firefox's default bookmarks configured$/ do
  next if @skip_steps_while_restoring_background
  info = xul_application_info("Unsafe Browser")
  # "Show all bookmarks"
  @screen.type("o", Sikuli::KeyModifier.SHIFT + Sikuli::KeyModifier.CTRL)
  @screen.wait_and_click("UnsafeBrowserExportBookmarksButton.png", 20)
  @screen.wait_and_click("UnsafeBrowserExportBookmarksMenuEntry.png", 20)
  @screen.wait("UnsafeBrowserExportBookmarksSavePrompt.png", 20)
  path = "/home/#{info[:user]}/bookmarks"
  @screen.type(path + Sikuli::Key.ENTER)
  chroot_path = "#{info[:chroot]}/#{path}.json"
  try_for(10) { @vm.file_exist?(chroot_path) }
  dump = JSON.load(@vm.file_content(chroot_path))

  def check_bookmarks_helper(a)
    mozilla_uris_counter = 0
    places_uris_counter = 0
    a.each do |h|
      h.each_pair do |k, v|
        if k == "children"
          m, p = check_bookmarks_helper(v)
          mozilla_uris_counter += m
          places_uris_counter += p
        elsif k == "uri"
          uri = v
          if uri.match("^https://www\.mozilla\.org/")
            mozilla_uris_counter += 1
          elsif uri.match("^place:(sort|folder|type)=")
            places_uris_counter += 1
          else
            raise "Unexpected Unsafe Browser bookmark for '#{uri}'"
          end
        end
      end
    end
    return [mozilla_uris_counter, places_uris_counter]
  end

  mozilla_uris_counter, places_uris_counter =
    check_bookmarks_helper(dump["children"])
  assert_equal(5, mozilla_uris_counter,
               "Unexpected number (#{mozilla_uris_counter}) of mozilla " \
               "bookmarks")
  assert_equal(3, places_uris_counter,
               "Unexpected number (#{places_uris_counter}) of places " \
               "bookmarks")
  @screen.type(Sikuli::Key.F4, Sikuli::KeyModifier.ALT)
end

118
Then /^the Unsafe Browser has a red theme$/ do
119
  next if @skip_steps_while_restoring_background
120 121 122 123
  @screen.wait("UnsafeBrowserRedTheme.png", 10)
end

Then /^the Unsafe Browser shows a warning as its start page$/ do
124
  next if @skip_steps_while_restoring_background
125 126 127 128
  @screen.wait("UnsafeBrowserStartPage.png", 10)
end

When /^I start the Unsafe Browser$/ do
129
  next if @skip_steps_while_restoring_background
130
  step 'I start "UnsafeBrowser" via the GNOME "Internet" applications menu'
131 132 133 134 135
end

When /^I successfully start the Unsafe Browser$/ do
  next if @skip_steps_while_restoring_background
  step "I start the Unsafe Browser"
136
  step "I see and accept the Unsafe Browser start verification"
137
  step "I see the Unsafe Browser start notification and wait for it to close"
138
  step "the Unsafe Browser has started"
139 140 141
end

Then /^I see a warning about another instance already running$/ do
142
  next if @skip_steps_while_restoring_background
143 144 145
  @screen.wait('UnsafeBrowserWarnAlreadyRunning.png', 10)
end

Tails developers's avatar
Tails developers committed
146
When /^I close the Unsafe Browser$/ do
147
  next if @skip_steps_while_restoring_background
148
  @screen.type("q", Sikuli::KeyModifier.CTRL)
149 150
end

151 152
Then /^I see the Unsafe Browser stop notification$/ do
  next if @skip_steps_while_restoring_background
153
  notification_helper('UnsafeBrowserStopNotification.png', 20)
154 155 156
  @screen.waitVanish('UnsafeBrowserStopNotification.png', 10)
end

157
Then /^I can start the Unsafe Browser again$/ do
158
  next if @skip_steps_while_restoring_background
159 160 161
  step "I start the Unsafe Browser"
end

162
Then /^I cannot configure the Unsafe Browser to use any local proxies$/ do
163
  next if @skip_steps_while_restoring_background
164 165
  socks_proxy = 'c' # Alt+c for socks proxy
  no_proxy    = 'y' # Alt+y for no proxy
166 167 168 169 170 171 172 173
  proxies = [[no_proxy, nil, nil]]
  socksport_lines =
    @vm.execute_successfully('grep -w "^SocksPort" /etc/tor/torrc').stdout
  assert(socksport_lines.size >= 4, "We got fewer than four Tor SocksPorts")
  socksports = socksport_lines.scan(/^SocksPort\s([^:]+):(\d+)/)
  proxies += socksports.map { |host, port| [socks_proxy, host, port] }

  proxies.each do |proxy_type, proxy_host, proxy_port|
174 175
    @screen.hide_cursor

176
    # Open proxy settings and select manual proxy configuration
177 178
    @screen.click('UnsafeBrowserMenuButton.png')
    @screen.wait_and_click('UnsafeBrowserPreferencesButton.png', 10)
179 180 181 182 183
    @screen.wait_and_click('UnsafeBrowserAdvancedSettingsButton.png', 10)
    hit, _ = @screen.waitAny(['UnsafeBrowserNetworkTabAlreadySelected.png',
                              'UnsafeBrowserNetworkTab.png'], 10)
    @screen.click(hit) if hit == 'UnsafeBrowserNetworkTab.png'
    @screen.wait_and_click('UnsafeBrowserNetworkTabSettingsButton.png', 10)
184
    @screen.wait('UnsafeBrowserProxySettingsWindow.png', 10)
185
    @screen.type("m", Sikuli::KeyModifier.ALT)
186 187

    # Configure the proxy
188
    @screen.type(proxy_type, Sikuli::KeyModifier.ALT)  # Select correct proxy type
189
    @screen.type(proxy_host + Sikuli::Key.TAB + proxy_port) if proxy_type != no_proxy
190

Tails developers's avatar
Tails developers committed
191
    # Close settings
192
    @screen.type(Sikuli::Key.ENTER)
anonym's avatar
anonym committed
193
    @screen.waitVanish('UnsafeBrowserProxySettingsWindow.png', 10)
194 195 196 197 198 199 200 201 202 203

    # Test that the proxy settings work as they should
    step "I open the address \"https://check.torproject.org\" in the Unsafe Browser"
    if proxy_type == no_proxy
      @screen.wait('UnsafeBrowserTorCheckFail.png', 60)
    else
      @screen.wait('UnsafeBrowserProxyRefused.png', 60)
    end
  end
end
204

205 206 207 208
Then /^the Unsafe Browser has no proxy configured$/ do
  next if @skip_steps_while_restoring_background
  @screen.click('UnsafeBrowserMenuButton.png')
  @screen.wait_and_click('UnsafeBrowserPreferencesButton.png', 10)
209
  @screen.wait_and_click('UnsafeBrowserAdvancedSettingsButton.png', 10)
210
  @screen.wait_and_click('UnsafeBrowserNetworkTab.png', 10)
211
  @screen.wait_and_click('UnsafeBrowserNetworkTabSettingsButton.png', 10)    
212 213 214
  @screen.wait('UnsafeBrowserProxySettings.png', 10)
  @screen.wait('UnsafeBrowserNoProxySelected.png', 10)
  @screen.type(Sikuli::Key.F4, Sikuli::KeyModifier.ALT)
215
  @screen.type("w", Sikuli::KeyModifier.CTRL)
216 217
end

218 219 220 221
Then /^the Unsafe Browser complains that no DNS server is configured$/ do
  next if @skip_steps_while_restoring_background
  @screen.wait("UnsafeBrowserDNSError.png", 30)
end
222 223 224 225 226 227 228 229

Then /^I configure the Unsafe Browser to check for updates more frequently$/ do
  next if @skip_steps_while_restoring_background
  prefs = '/usr/share/tails/unsafe-browser/prefs.js'
  @vm.file_append(prefs, 'pref("app.update.idletime", 1);')
  @vm.file_append(prefs, 'pref("app.update.promptWaitTime", 1);')
  @vm.file_append(prefs, 'pref("app.update.interval", 5);')
end
230 231 232 233 234 235

But /^checking for updates is disabled in the Unsafe Browser's configuration$/ do
  next if @skip_steps_while_restoring_background
  prefs = '/usr/share/tails/unsafe-browser/prefs.js'
  assert(@vm.file_content(prefs).include?('pref("app.update.enabled", false)'))
end
236 237 238 239 240 241 242 243

Then /^the clearnet user has (|not )sent packets out to the Internet$/ do |sent|
  next if @skip_steps_while_restoring_background
  pkts = 0
  uid = @vm.execute_successfully("id -u clearnet").stdout.chomp.to_i
  iptables_output = @vm.execute_successfully("iptables -vnL").stdout.chomp
  output_chain = iptables_parse(iptables_output)["OUTPUT"]
  output_chain["rules"].each do |rule|
Tails developers's avatar
Tails developers committed
244
    if /owner UID match \b#{uid}\b/.match(rule["extra"])
245
      pkts += rule["pkts"]
246 247 248 249 250 251 252 253 254 255
    end
  end

  case sent
  when ''
    assert(pkts > 0, "Packets have not gone out to the internet.")
  when 'not'
    assert_equal(pkts, 0, "Packets have gone out to the internet.")
  end
end