Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(329)

Unified Diff: LayoutTests/http/tests/security/cross-frame-access-get-expected.txt

Issue 14198015: Deny cross-origin access to 'window.history'. (Closed) Base URL: svn://svn.chromium.org/blink/trunk
Patch Set: Rebase. Created 7 years, 7 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: LayoutTests/http/tests/security/cross-frame-access-get-expected.txt
diff --git a/LayoutTests/http/tests/security/cross-frame-access-get-expected.txt b/LayoutTests/http/tests/security/cross-frame-access-get-expected.txt
index b28b100dcd1240ac421faa271dacb450fe01376a..b92a1a8c6233e0fac950404b59b37e84bf142ae4 100644
--- a/LayoutTests/http/tests/security/cross-frame-access-get-expected.txt
+++ b/LayoutTests/http/tests/security/cross-frame-access-get-expected.txt
@@ -184,6 +184,7 @@ CONSOLE MESSAGE: Blocked a frame with origin "http://127.0.0.1:8000" from access
CONSOLE MESSAGE: Blocked a frame with origin "http://127.0.0.1:8000" from accessing a frame with origin "http://localhost:8000". Protocols, domains, and ports must match.
CONSOLE MESSAGE: Blocked a frame with origin "http://127.0.0.1:8000" from accessing a frame with origin "http://localhost:8000". Protocols, domains, and ports must match.
CONSOLE MESSAGE: Blocked a frame with origin "http://127.0.0.1:8000" from accessing a frame with origin "http://localhost:8000". Protocols, domains, and ports must match.
+CONSOLE MESSAGE: Blocked a frame with origin "http://127.0.0.1:8000" from accessing a frame with origin "http://localhost:8000". Protocols, domains, and ports must match.
This test checks cross-frame access security (rdar://problem/5251309).
@@ -201,7 +202,6 @@ PASS: canGet('targetWindow.focus') should be 'true' and is.
PASS: canGet('targetWindow.closed') should be 'true' and is.
PASS: canGet('targetWindow.frames') should be 'true' and is.
-PASS: canGet('targetWindow.history') should be 'true' and is.
PASS: canGet('targetWindow.length') should be 'true' and is.
PASS: canGet('targetWindow.opener') should be 'true' and is.
PASS: canGet('targetWindow.parent') should be 'true' and is.
@@ -357,6 +357,7 @@ PASS: canGet('targetWindow.embeds') should be 'false' and is.
PASS: canGet('targetWindow.eval') should be 'false' and is.
PASS: canGet('targetWindow.event') should be 'false' and is.
PASS: canGet('targetWindow.frameElement') should be 'false' and is.
+PASS: canGet('targetWindow.history') should be 'false' and is.
PASS: canGet('targetWindow.images') should be 'false' and is.
PASS: canGet('targetWindow.innerHeight') should be 'false' and is.
PASS: canGet('targetWindow.innerWidth') should be 'false' and is.

Powered by Google App Engine
This is Rietveld 408576698