Chromium Code Reviews Chromium Code Reviews
Issue 2452073002:
Freeze global prototype chain per WebIDL (Closed)
| Index: third_party/WebKit/LayoutTests/http/tests/security/xss-getownproperty.html |
| diff --git a/third_party/WebKit/LayoutTests/http/tests/security/xss-getownproperty.html b/third_party/WebKit/LayoutTests/http/tests/security/xss-getownproperty.html |
| deleted file mode 100644 |
| index 9e6645db800226e7c0ac04641d591fd9e4674b82..0000000000000000000000000000000000000000 |
| --- a/third_party/WebKit/LayoutTests/http/tests/security/xss-getownproperty.html |
| +++ /dev/null |
| @@ -1,35 +0,0 @@ |
| -<!doctype html> |
| -<body> |
| -Test should log two "PASS" messages to the console. |
|
adamk
2016/11/09 01:08:50
This test looks unrelated, did it get accidentally
Dan Ehrenberg
2016/11/09 01:12:32
This is also a test for the mutation of the global
|
| -<script> |
| -if (window.testRunner) { |
| - testRunner.dumpAsText(); |
| - testRunner.waitUntilDone(); |
| -} |
| - |
| -var frame = document.body.appendChild(document.createElement("iframe")); |
| -frame.src = "https://localhost:8443/security/resources/doc-with-iframe.html"; |
| -frame.onload = function() { |
| - frame.onload = null; |
| - target = frame.contentWindow; |
| - target[0].location = "data:text/html,<script>name='eval'</scr" + "ipt>"; |
| - setTimeout(function() { |
| - try { |
| - Object.getOwnPropertyDescriptor(target, "eval").value("console.log('FAIL: Access check bypassed.')"); |
| - } catch (e) { |
| - console.log("PASS: Access check triggered"); |
| - } |
| - target[0].location = "data:text/html,<script>name='myEval'</scr" + "ipt>"; |
| - setTimeout(function() { |
| - try { |
| - target.myEval("console.log('FAIL: Access check bypassed.')"); |
| - } catch (e) { |
| - console.log("PASS: Access check triggered"); |
| - } |
| - if (window.testRunner) |
| - testRunner.notifyDone(); |
| - }, 500); |
| - }, 500); |
| -} |
| -</script> |
| -</body> |
