OLD | NEW |
1 <?php | 1 <?php |
2 header("Suborigin: foobar 'unsafe-postmessage-receive'"); | 2 header("Suborigin: foobar 'unsafe-postmessage-receive'"); |
3 ?> | 3 ?> |
4 <!DOCTYPE html> | 4 <!DOCTYPE html> |
5 <html> | 5 <html> |
6 <head> | 6 <head> |
7 <title>Validate that unsafe-postmessage-receive allows Suborigin to receive mess
ages as physical origin via postMessage.</title> | 7 <title>Validate that unsafe-postmessage-receive allows Suborigin to receive mess
ages as physical origin via postMessage.</title> |
8 <script src="/resources/testharness.js"></script> | 8 <script src="/resources/testharness.js"></script> |
9 <script src="/resources/testharnessreport.js"></script> | 9 <script src="/resources/testharnessreport.js"></script> |
10 </head> | 10 </head> |
11 <script> | 11 <script> |
12 var iframe_test = async_test("Validate serialization of event.origin and event.s
uborigin in postMessage from an iframe"); | 12 var iframe_test = async_test("Validate serialization of event.origin and event.s
uborigin in postMessage from an iframe"); |
13 var window_test = async_test("Validate serialization of event.origin and event.s
uborigin in postMessage from a window"); | 13 var window_test = async_test("Validate serialization of event.origin and event.s
uborigin in postMessage from a window"); |
14 | 14 |
15 window.onmessage = function(event) { | 15 window.onmessage = function(event) { |
16 if (event.data.type === 'iframe') { | 16 if (event.data.type === 'iframe') { |
17 iframe_test.step(function() { | 17 iframe_test.step(function() { |
18 assert_equals(event.origin, "http://foobar1_127.0.0.1:8000"); | 18 assert_equals(event.origin, "http-so://foobar1.127.0.0.1:8000"); |
19 assert_equals(event.suborigin, "foobar1"); | 19 assert_equals(event.suborigin, "foobar1"); |
20 assert_equals(event.data.suborigin, "foobar1"); | 20 assert_equals(event.data.suborigin, "foobar1"); |
21 iframe_test.done(); | 21 iframe_test.done(); |
22 }); | 22 }); |
23 } else if (event.data.type === 'window') { | 23 } else if (event.data.type === 'window') { |
24 window_test.step(function() { | 24 window_test.step(function() { |
25 assert_equals(event.origin, "http://foobar2_127.0.0.1:8000"); | 25 assert_equals(event.origin, "http-so://foobar2.127.0.0.1:8000"); |
26 assert_equals(event.suborigin, "foobar2"); | 26 assert_equals(event.suborigin, "foobar2"); |
27 assert_equals(event.data.suborigin, "foobar2"); | 27 assert_equals(event.data.suborigin, "foobar2"); |
28 window_test.done(); | 28 window_test.done(); |
29 }); | 29 }); |
30 } else { | 30 } else { |
31 assert_unreached(); | 31 assert_unreached(); |
32 } | 32 } |
33 | 33 |
34 } | 34 } |
35 | 35 |
36 window.open("resources/post-document-to-parent.php?suborigin=foobar2&type=window
&target=http://127.0.0.1:8000"); | 36 window.open("resources/post-document-to-parent.php?suborigin=foobar2&type=window
&target=http://127.0.0.1:8000"); |
37 </script> | 37 </script> |
38 <iframe src="resources/post-document-to-parent.php?suborigin=foobar1&type=iframe
&target=http://127.0.0.1:8000"></iframe> | 38 <iframe src="resources/post-document-to-parent.php?suborigin=foobar1&type=iframe
&target=http://127.0.0.1:8000"></iframe> |
39 </html> | 39 </html> |
OLD | NEW |