Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(69)

Unified Diff: LayoutTests/http/tests/security/suborigins/suborigin-change-document-domain.html

Issue 1180923003: Add window access checks for Suborigins (Closed) Base URL: https://chromium.googlesource.com/chromium/blink.git@master
Patch Set: Fix tests on Windows Created 5 years, 6 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: LayoutTests/http/tests/security/suborigins/suborigin-change-document-domain.html
diff --git a/LayoutTests/http/tests/security/suborigins/suborigin-change-document-domain.html b/LayoutTests/http/tests/security/suborigins/suborigin-change-document-domain.html
index 106b5b17a89813c82d76d3c4382dd6451f7891e0..65c0262f84936331d0e3e0d8959a9a4fb6980e57 100644
--- a/LayoutTests/http/tests/security/suborigins/suborigin-change-document-domain.html
+++ b/LayoutTests/http/tests/security/suborigins/suborigin-change-document-domain.html
@@ -8,9 +8,9 @@
<script>
document.domain = '127.0.0.1';
window.secret = 'Unchanged';
-window.onmessage = function() {
- console.log('secret = ' + secret);
+window.onmessage = function(event) {
assert_equals(secret, 'Unchanged', 'secret should not be touchable by the child in a suborigin.');
+ assert_equals(event.data, 'SecurityError: Blocked a frame with origin \"http://foobar_127.0.0.1:8000\" from accessing a cross-origin frame.');
done();
};
</script>

Powered by Google App Engine
This is Rietveld 408576698