| OLD | NEW | 
|   1 <html> |   1 <html> | 
|   2 <body> |   2 <body> | 
|   3 <p>Inner iframe on a foreign domain.</p> |   3 <p>Inner iframe on a foreign domain.</p> | 
|   4 <iframe id="aFrame" name="aFrame"></iframe> |   4 <iframe id="aFrame"></iframe> | 
|   5 <script> |   5 <script> | 
|   6     window.onload = function() { |   6     window.onload = function() { | 
|   7         var url = "data:text/html,<html>" |   7         var url = "data:text/html,<html>" | 
|   8             + "<head>" |   8             + "<head>" | 
|   9             +     "<scr" + "ipt>" |   9             +     "<scr" + "ipt>" | 
|  10             +         "window.onload = function()" |  10             +         "window.onload = function()" | 
|  11             +         "{" |  11             +         "{" | 
|  12             +             "try {" |  12             +             "try {" | 
|  13             +                 "top.document.getElementById('accessMe').innerHTML
     = 'FAIL: Cross frame access from a data: URL on a different domain was allowed'
    ;" |  13             +                 "top.document.getElementById('accessMe').innerHTML
     = 'FAIL: Cross frame access from a data: URL on a different domain was allowed'
    ;" | 
|  14             +                 "alert('FAIL: No exception thrown.');" |  14             +                 "alert('FAIL: No exception thrown.');" | 
| (...skipping 10 matching lines...) Expand all  Loading... | 
|  25             +     " the main frame.  It should not have access to it.</p>" |  25             +     " the main frame.  It should not have access to it.</p>" | 
|  26             + "</body>" |  26             + "</body>" | 
|  27             + "</html>"; |  27             + "</html>"; | 
|  28  |  28  | 
|  29         var frame = document.getElementById('aFrame'); |  29         var frame = document.getElementById('aFrame'); | 
|  30         frame.src = url; |  30         frame.src = url; | 
|  31     }; |  31     }; | 
|  32 </script> |  32 </script> | 
|  33 </body> |  33 </body> | 
|  34 </html> |  34 </html> | 
| OLD | NEW |