OLD | NEW |
1 <html> | 1 <html> |
2 <body> | 2 <body> |
3 <p>Inner iframe on a foreign domain.</p> | 3 <p>Inner iframe on a foreign domain.</p> |
4 <iframe id="aFrame"></iframe> | 4 <iframe id="aFrame" name="aFrame"></iframe> |
5 <script> | 5 <script> |
6 window.onload = function() { | 6 window.onload = function() { |
7 var url = "data:text/html,<html>" | 7 var url = "data:text/html,<html>" |
8 + "<head>" | 8 + "<head>" |
9 + "<scr" + "ipt>" | 9 + "<scr" + "ipt>" |
10 + "window.onload = function()" | 10 + "window.onload = function()" |
11 + "{" | 11 + "{" |
12 + "try {" | 12 + "try {" |
13 + "top.document.getElementById('accessMe').innerHTML
= 'FAIL: Cross frame access from a data: URL on a different domain was allowed'
;" | 13 + "top.document.getElementById('accessMe').innerHTML
= 'FAIL: Cross frame access from a data: URL on a different domain was allowed'
;" |
14 + "alert('FAIL: No exception thrown.');" | 14 + "alert('FAIL: No exception thrown.');" |
(...skipping 10 matching lines...) Expand all Loading... |
25 + " the main frame. It should not have access to it.</p>" | 25 + " the main frame. It should not have access to it.</p>" |
26 + "</body>" | 26 + "</body>" |
27 + "</html>"; | 27 + "</html>"; |
28 | 28 |
29 var frame = document.getElementById('aFrame'); | 29 var frame = document.getElementById('aFrame'); |
30 frame.src = url; | 30 frame.src = url; |
31 }; | 31 }; |
32 </script> | 32 </script> |
33 </body> | 33 </body> |
34 </html> | 34 </html> |
OLD | NEW |