Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(221)

Unified Diff: third_party/WebKit/LayoutTests/http/tests/security/frameNavigation/resources/iframe-that-performs-parent-navigation.html

Issue 2092293002: Block framebusts without a user gesture (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: better flag description Created 4 years, 3 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: third_party/WebKit/LayoutTests/http/tests/security/frameNavigation/resources/iframe-that-performs-parent-navigation.html
diff --git a/third_party/WebKit/LayoutTests/http/tests/security/frameNavigation/resources/iframe-that-performs-parent-navigation.html b/third_party/WebKit/LayoutTests/http/tests/security/frameNavigation/resources/iframe-that-performs-parent-navigation.html
index df20f413dd5ebe49c779ff242cdeaceef4b5b39b..aaff6f66f4509ef4e535fe1ad3c183dc848a14fc 100644
--- a/third_party/WebKit/LayoutTests/http/tests/security/frameNavigation/resources/iframe-that-performs-parent-navigation.html
+++ b/third_party/WebKit/LayoutTests/http/tests/security/frameNavigation/resources/iframe-that-performs-parent-navigation.html
@@ -4,19 +4,29 @@
function loaded()
{
document.getElementsByTagName('h4')[0].innerHTML = document.domain;
- // Allow the user to click the button during manuel runs.
- if (window.testRunner)
- performTest();
+ }
+
+ function startTest(event)
+ {
+ // A manual click should navigate.
+ if (window.eventSender) {
+ var button = document.getElementById("b");
+ eventSender.mouseMoveTo(button.offsetLeft + event.data.x + 2, button.offsetTop + event.data.y + 2);
+ eventSender.mouseDown();
+ eventSender.mouseUp();
+ }
}
function performTest()
{
parent.location = "http://localhost:8000/security/frameNavigation/resources/navigation-changed-iframe.html";
}
+
+ window.addEventListener("message", startTest, false);
</script>
</head>
<body onload="loaded();">
<h4>DOMAIN</h4>
- <button onclick="performTest();">Perform Test</button>
+ <button id="b" onclick="performTest();">Perform Test</button>
</body>
</html>

Powered by Google App Engine
This is Rietveld 408576698