third_party/WebKit/LayoutTests/http/tests/security/sandboxed-iframe-javascript-url.html - Issue 2154213003: Prevent 'javascript:' URL execution in sandboxed frame.

Side by Side Diff

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Keyboard Shortcuts

	File
u :	up to issue
j / k :	jump to file after / before current file
J / K :	jump to next file with a comment after / before current file
	Side-by-side diff
i :	toggle intra-line diffs
e :	expand all comments
c :	collapse all comments
s :	toggle showing all comments
n / p :	next / previous diff chunk or comment
N / P :	next / previous comment
<Up> / <Down> :	next / previous line

	Issue
u :	up to list of issues
j / k :	jump to patch after / before current patch
o / <Enter> :	open current patch in side-by-side view
i :	open current patch in unified diff view

	Issue List
j / k :	jump to issue after / before current issue
o / <Enter> :	open current issue

Side by Side Diff: third_party/WebKit/LayoutTests/http/tests/security/sandboxed-iframe-javascript-url.html

Issue 2154213003: Prevent 'javascript:' URL execution in sandboxed frame. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master

Patch Set: Created 4 years, 5 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View unified diff | Download patch

OLD	NEW
(Empty)
	1 <!DOCTYPE html>

	2 <script src="/resources/testharness.js"></script>

	3 <script src="/resources/testharnessreport.js"></script>

	4 <body>

	5 <script>

	6 async_test(t => {

	7 var i = document.createElement('iframe');

	8 i.setAttribute("sandbox", "allow-scripts");

	9 i.setAttribute("src", "javascript:top.postMessage('fail', '*');");

	10 window.addEventListener(

	11 "message",

	12 t.unreached_func("The sandboxed 'javascript:' URL should not execute ."));

	13

	14 document.body.appendChild(i);

	15

	16 // TODO(mkwst): I would love a better test here, but I don't know how el se to

	17 // verify that the script _doesn't_ execute.

	18 setTimeout(t.done.bind(t), 250);

	19 }, "JavaScript URLs in sandboxed iframes should not execute, as the origin i s distinct from its opener.");

	20 </script>

OLD	NEW

« no previous file with comments | « no previous file | third_party/WebKit/Source/core/html/HTMLFrameElementBase.cpp » ('j') | no next file with comments »