| OLD | NEW |
| 1 <html> | 1 <html> |
| 2 <body> | 2 <body> |
| 3 <p>Inner iframe on a foreign domain.</p> | 3 <p>Inner iframe on a foreign domain.</p> |
| 4 <iframe id="aFrame" name="aFrame"></iframe> | 4 <iframe id="aFrame"></iframe> |
| 5 <script> | 5 <script> |
| 6 window.onload = function() { | 6 window.onload = function() { |
| 7 var url = "data:text/html,<html>" | 7 var url = "data:text/html,<html>" |
| 8 + "<head>" | 8 + "<head>" |
| 9 + "<scr" + "ipt>" | 9 + "<scr" + "ipt>" |
| 10 + "window.onload = function()" | 10 + "window.onload = function()" |
| 11 + "{" | 11 + "{" |
| 12 + "try {" | 12 + "try {" |
| 13 + "top.document.getElementById('accessMe').innerHTML
= 'FAIL: Cross frame access from a data: URL on a different domain was allowed'
;" | 13 + "top.document.getElementById('accessMe').innerHTML
= 'FAIL: Cross frame access from a data: URL on a different domain was allowed'
;" |
| 14 + "alert('FAIL: No exception thrown.');" | 14 + "alert('FAIL: No exception thrown.');" |
| (...skipping 10 matching lines...) Expand all Loading... |
| 25 + " the main frame. It should not have access to it.</p>" | 25 + " the main frame. It should not have access to it.</p>" |
| 26 + "</body>" | 26 + "</body>" |
| 27 + "</html>"; | 27 + "</html>"; |
| 28 | 28 |
| 29 var frame = document.getElementById('aFrame'); | 29 var frame = document.getElementById('aFrame'); |
| 30 frame.src = url; | 30 frame.src = url; |
| 31 }; | 31 }; |
| 32 </script> | 32 </script> |
| 33 </body> | 33 </body> |
| 34 </html> | 34 </html> |
| OLD | NEW |