Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(156)

Side by Side Diff: third_party/WebKit/LayoutTests/http/tests/security/frameNavigation/xss-DENIED-top-navigation-user-gesture-in-parent.html

Issue 2392773002: Reenable framebusting deprecation, change it to allow navigation if iframe has ever had a user gestu (Closed)
Patch Set: Rebase Created 4 years, 1 month ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
1 <html> 1 <html>
2 <head> 2 <body>
3 <script> 3 <script>
4 if (window.testRunner) { 4 if (window.testRunner) {
5 testRunner.dumpAsText(); 5 testRunner.dumpAsText();
6 testRunner.dumpChildFramesAsText(); 6 testRunner.dumpChildFramesAsText();
7 testRunner.setDumpConsoleMessages(false); 7 testRunner.setDumpConsoleMessages(false);
8 } 8 }
9 if (window.internals) 9
10 internals.runtimeFlags.setFramebustingNeedsSameOriginOrUserGesture(true); 10 // Ensure a user gesture happened in the main frame, but not in the iframe.
11 if (window.eventSender) {
12 eventSender.mouseMoveTo(0, 0);
13 eventSender.mouseDown(0, 0);
14 eventSender.mouseUp(0, 0);
15 }
11 </script> 16 </script>
12 </head>
13 <body>
14 <iframe src="http://localhost:8000/security/frameNavigation/resources/iframe-tha t-performs-top-navigation-without-user-gesture.html"></iframe> 17 <iframe src="http://localhost:8000/security/frameNavigation/resources/iframe-tha t-performs-top-navigation-without-user-gesture.html"></iframe>
15 </body> 18 </body>
16 </html> 19 </html>
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698