Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(931)

Side by Side Diff: third_party/WebKit/LayoutTests/http/tests/security/xssAuditor/full-block-iframe-javascript-url.html

Issue 2425663002: Add an error page for resources blocked via XSS Auditor. (Closed)
Patch Set: Test. Created 4 years ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
1 <!DOCTYPE html> 1 <!DOCTYPE html>
2 <html> 2 <html>
3 <head> 3 <head>
4 <script src="http://localhost:8000/security/xssAuditor/resources/utilities.js">< /script> 4 <script src="http://localhost:8000/security/xssAuditor/resources/utilities.js">< /script>
5 <script> 5 <script>
6 if (window.testRunner) { 6 if (window.testRunner) {
7 testRunner.dumpAsText(); 7 testRunner.dumpAsText();
8 testRunner.dumpChildFramesAsText(); 8 testRunner.dumpChildFramesAsText();
9 testRunner.waitUntilDone(); 9 testRunner.waitUntilDone();
10 testRunner.setXSSAuditorEnabled(true); 10 testRunner.setXSSAuditorEnabled(true);
11 } 11 }
12 </script> 12 </script>
13 </head> 13 </head>
14 <body> 14 <body>
15 <p>There should be no content in the iframe below:</p> 15 <p>There should be no content in the iframe below:</p>
16 <iframe id="frame" name="frame" onload="checkIfFrameLocationMatchesSrcAndCallDon e('frame')" src='http://127.0.0.1:8000/security/xssAuditor/resources/echo-intert ag.pl?enable-full-block=1&q=%3Ciframe%20src=javascript:alert(document.domain)%3E '> 16 <iframe id="frame" name="frame" onload="checkFrameIsCrossOriginAndCallDone('fram e')" src='http://127.0.0.1:8000/security/xssAuditor/resources/echo-intertag.pl?e nable-full-block=1&q=%3Ciframe%20src=javascript:alert(document.domain)%3E'>
17 </iframe> 17 </iframe>
18 </body> 18 </body>
19 </html> 19 </html>
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698