Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(815)

Side by Side Diff: third_party/WebKit/LayoutTests/fast/parser/resources/set-parent-to-javascript-url.html

Issue 1374533002: Null out LocalDOMWindow::m_frame on navigation. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: try to fix crash-on-querying-event-path.html Created 5 years, 2 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
1 <script> 1 <script>
2 // Capture window.parent: once this context navigates, window.parent always retu rns null.
3 var p = parent;
2 alert(1); 4 alert(1);
3 parent.document.getElementsByTagName('iframe')[0].src = "javascript:alert(2),'PA SS<script>alert(3)<\/script>'"; 5 parent.document.getElementsByTagName('iframe')[0].src = "javascript:alert(2),'PA SS<script>alert(3)<\/script>'";
4 alert(4); 6 alert(4);
5 parent.setTimeout("done()", 0); 7 p.setTimeout("done()", 0);
6 </script> 8 </script>
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698