| OLD | NEW |
| 1 <?php | 1 <?php |
| 2 header("Suborigin: foobar 'unsafe-postmessage-receive'"); | 2 header("Suborigin: foobar 'unsafe-postmessage-receive'"); |
| 3 ?> | 3 ?> |
| 4 <!DOCTYPE html> | 4 <!DOCTYPE html> |
| 5 <html> | 5 <html> |
| 6 <head> | 6 <head> |
| 7 <title>Validate that unsafe-postmessage-receive allows Suborigin to receive mess
ages as physical origin via postMessage.</title> | 7 <title>Validate that unsafe-postmessage-receive allows Suborigin to receive mess
ages as physical origin via postMessage.</title> |
| 8 <script src="/resources/testharness.js"></script> | 8 <script src="/resources/testharness.js"></script> |
| 9 <script src="/resources/testharnessreport.js"></script> | 9 <script src="/resources/testharnessreport.js"></script> |
| 10 </head> | 10 </head> |
| 11 <script> | 11 <script> |
| 12 var iframe_test = async_test("Validate serialization of event.origin and event.s
uborigin in postMessage from an iframe"); | 12 var iframe_test = async_test("Validate serialization of event.origin and event.s
uborigin in postMessage from an iframe"); |
| 13 var window_test = async_test("Validate serialization of event.origin and event.s
uborigin in postMessage from a window"); | 13 var window_test = async_test("Validate serialization of event.origin and event.s
uborigin in postMessage from a window"); |
| 14 | 14 |
| 15 window.onmessage = function(event) { | 15 window.onmessage = function(event) { |
| 16 if (event.data.type === 'iframe') { | 16 if (event.data.type === 'iframe') { |
| 17 iframe_test.step(function() { | 17 iframe_test.step(function() { |
| 18 assert_equals(event.origin, "http://foobar1_127.0.0.1:8000"); | 18 assert_equals(event.origin, "http-so://foobar1.127.0.0.1:8000"); |
| 19 assert_equals(event.suborigin, "foobar1"); | 19 assert_equals(event.suborigin, "foobar1"); |
| 20 assert_equals(event.data.suborigin, "foobar1"); | 20 assert_equals(event.data.suborigin, "foobar1"); |
| 21 iframe_test.done(); | 21 iframe_test.done(); |
| 22 }); | 22 }); |
| 23 } else if (event.data.type === 'window') { | 23 } else if (event.data.type === 'window') { |
| 24 window_test.step(function() { | 24 window_test.step(function() { |
| 25 assert_equals(event.origin, "http://foobar2_127.0.0.1:8000"); | 25 assert_equals(event.origin, "http-so://foobar2.127.0.0.1:8000"); |
| 26 assert_equals(event.suborigin, "foobar2"); | 26 assert_equals(event.suborigin, "foobar2"); |
| 27 assert_equals(event.data.suborigin, "foobar2"); | 27 assert_equals(event.data.suborigin, "foobar2"); |
| 28 window_test.done(); | 28 window_test.done(); |
| 29 }); | 29 }); |
| 30 } else { | 30 } else { |
| 31 assert_unreached(); | 31 assert_unreached(); |
| 32 } | 32 } |
| 33 | 33 |
| 34 } | 34 } |
| 35 | 35 |
| 36 window.open("resources/post-document-to-parent.php?suborigin=foobar2&type=window
&target=http://127.0.0.1:8000"); | 36 window.open("resources/post-document-to-parent.php?suborigin=foobar2&type=window
&target=http://127.0.0.1:8000"); |
| 37 </script> | 37 </script> |
| 38 <iframe src="resources/post-document-to-parent.php?suborigin=foobar1&type=iframe
&target=http://127.0.0.1:8000"></iframe> | 38 <iframe src="resources/post-document-to-parent.php?suborigin=foobar1&type=iframe
&target=http://127.0.0.1:8000"></iframe> |
| 39 </html> | 39 </html> |
| OLD | NEW |