Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(54)

Side by Side Diff: LayoutTests/http/tests/security/dataURL/xss-DENIED-from-data-url-to-data-url.html

Issue 187103002: id of iframe incorrectly sets window name (Closed) Base URL: svn://svn.chromium.org/blink/trunk
Patch Set: Add back no-referrer-subframe.html Created 6 years, 9 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
OLDNEW
1 <html> 1 <html>
2 <head> 2 <head>
3 <script src="../resources/cross-frame-access.js"></script> 3 <script src="../resources/cross-frame-access.js"></script>
4 <script> 4 <script>
5 if (window.testRunner) { 5 if (window.testRunner) {
6 testRunner.dumpAsText(); 6 testRunner.dumpAsText();
7 testRunner.dumpChildFramesAsText(); 7 testRunner.dumpChildFramesAsText();
8 testRunner.waitUntilDone(); 8 testRunner.waitUntilDone();
9 } 9 }
10 10
(...skipping 42 matching lines...) Expand 10 before | Expand all | Expand 10 after
53 + "try {" 53 + "try {"
54 + "frames[0].document.getElementById('accessMe') .innerHTML = 'FAIL: Cross frame access from a data: URL was allowed.';" 54 + "frames[0].document.getElementById('accessMe') .innerHTML = 'FAIL: Cross frame access from a data: URL was allowed.';"
55 + "} catch (e) {" 55 + "} catch (e) {"
56 + "}" 56 + "}"
57 + "if (window.testRunner)" 57 + "if (window.testRunner)"
58 + "testRunner.notifyDone();" 58 + "testRunner.notifyDone();"
59 + "}" 59 + "}"
60 + "</scr" + "ipt>" 60 + "</scr" + "ipt>"
61 + "</head>" 61 + "</head>"
62 + "<body onload='loaded();'>" 62 + "<body onload='loaded();'>"
63 + "<iframe id='inner'></iframe>" 63 + "<iframe id='inner' name='inner'></iframe>"
64 + "<p>Inner iframe.</p>" 64 + "<p>Inner iframe.</p>"
65 + "<button onclick='performTest();'>Test</button>" 65 + "<button onclick='performTest();'>Test</button>"
66 + "<pre id='console'></pre>" 66 + "<pre id='console'></pre>"
67 + "</body>" 67 + "</body>"
68 + "</html>"; 68 + "</html>";
69 69
70 var iframe = document.getElementById("aFrame"); 70 var iframe = document.getElementById("aFrame");
71 iframe.src = url; 71 iframe.src = url;
72 } 72 }
73 </script> 73 </script>
74 </head> 74 </head>
75 <body onload="loaded();"> 75 <body onload="loaded();">
76 <p>This tests that a data: URL subframe can't access a child data: URL subfr ame of itself.</p> 76 <p>This tests that a data: URL subframe can't access a child data: URL subfr ame of itself.</p>
77 <iframe name="aFrame" id="aFrame" style="width: 500px; height: 300px;"></ifr ame> 77 <iframe name="aFrame" id="aFrame" style="width: 500px; height: 300px;"></ifr ame>
78 </body> 78 </body>
79 </html> 79 </html>
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698