OLD | NEW |
1 <html> | 1 <html> |
2 <body> | 2 <body> |
3 <p>Inner iframe on a foreign domain.</p> | 3 <p>Inner iframe on a foreign domain.</p> |
4 <iframe id="aFrame"></iframe> | 4 <iframe id="aFrame" name="aFrame"></iframe> |
5 <script> | 5 <script> |
6 var url = "javascript:\"<html>" | 6 var url = "javascript:\"<html>" |
7 + "<head>" | 7 + "<head>" |
8 + "<scr" + "ipt>" | 8 + "<scr" + "ipt>" |
9 + "window.onload = function()" | 9 + "window.onload = function()" |
10 + "{" | 10 + "{" |
11 + "if (window.testRunner)" | 11 + "if (window.testRunner)" |
12 + "testRunner.globalFlag = true;" | 12 + "testRunner.globalFlag = true;" |
13 + "}" | 13 + "}" |
14 + "</scr" + "ipt>" | 14 + "</scr" + "ipt>" |
15 + "</head>" | 15 + "</head>" |
16 + "<body>" | 16 + "<body>" |
17 + "<p id='accessMe'>PASS: Cross frame access from a frame on a f
oreign domain denied!</p>" | 17 + "<p id='accessMe'>PASS: Cross frame access from a frame on a f
oreign domain denied!</p>" |
18 + "<p>Inner-inner iframe. This iframe (which is javascript: URL
and whose parent is on a foreign domain) is the frame that the" | 18 + "<p>Inner-inner iframe. This iframe (which is javascript: URL
and whose parent is on a foreign domain) is the frame that the" |
19 + " main frame is trying to access. It should not have access t
o it.</p>" | 19 + " main frame is trying to access. It should not have access t
o it.</p>" |
20 + "</body>" | 20 + "</body>" |
21 + "</html>\""; | 21 + "</html>\""; |
22 | 22 |
23 var frame = document.getElementById('aFrame'); | 23 var frame = document.getElementById('aFrame'); |
24 frame.src = url; | 24 frame.src = url; |
25 </script> | 25 </script> |
26 </body> | 26 </body> |
27 </html> | 27 </html> |
OLD | NEW |