Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(17)

Side by Side Diff: third_party/WebKit/LayoutTests/http/tests/security/mixedContent/active-subresource-in-http-iframe-not-blocked.https.html

Issue 1731103007: Apply strict blocking of active mixed content in HTTPS subframes only (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Created 4 years, 9 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
(Empty)
1 <!doctype html>
2 <html>
3 <head>
4 <script src="/resources/testharness.js"></script>
5 <script src="/resources/testharnessreport.js"></script>
6
7 <script>
8 if (window.testRunner) {
9 // This test checks that active mixed subresources in iframes
10 // are allowed if the iframe itself was allowed as mixed content.
11 testRunner.setAllowRunningOfInsecureContent(true);
12 testRunner.dumpAsText();
13 }
14
15 var t = async_test("Testing an insecure script in a mixed iframe");
16 window.addEventListener("message", t.step_func(function () {
17 t.done();
18 }));
19 </script>
20 </head>
21 <body>
22 <p>This test passes if the active subresource in the frame below is allowed. </p>
23 <iframe src="http://127.0.0.1:8000/security/mixedContent/resources/frame-loa ds-insecure-script.html"></iframe>
24 </body>
25 </html>
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698