| Index: third_party/WebKit/LayoutTests/http/tests/security/dangling-markup/option.html
|
| diff --git a/third_party/WebKit/LayoutTests/http/tests/security/dangling-markup/option.html b/third_party/WebKit/LayoutTests/http/tests/security/dangling-markup/option.html
|
| new file mode 100644
|
| index 0000000000000000000000000000000000000000..925e8a5bcc5a0d00b3e29fccf7cb03996b48c5e5
|
| --- /dev/null
|
| +++ b/third_party/WebKit/LayoutTests/http/tests/security/dangling-markup/option.html
|
| @@ -0,0 +1,52 @@
|
| +<!DOCTYPE html>
|
| +<script src="/resources/testharness.js"></script>
|
| +<script src="/resources/testharnessreport.js"></script>
|
| +<script src="./resources/helper.js"></script>
|
| +<body>
|
| +<script>
|
| +
|
| + var tests = [
|
| + `
|
| + <form action="/security/resources/postmessage-post.php" method="post">
|
| + <input type="submit">
|
| + <select name="dangling"><option>
|
| + `,
|
| + `
|
| + <div>
|
| + <form action="/security/resources/postmessage-post.php" method="post">
|
| + <input type="submit">
|
| + <select name="dangling"><option>
|
| + `,
|
| + `
|
| + <form action="/security/resources/postmessage-post.php" method="post" id="form">
|
| + <input type="submit">
|
| + </form>
|
| + <select name="dangling" form="form"><option>
|
| + `,
|
| + `
|
| + <form action="/security/resources/postmessage-post.php" method="post">
|
| + <input type="submit">
|
| + <select name="dangling"><option label="yay">
|
| + `,
|
| + `
|
| + <div>
|
| + <form action="/security/resources/postmessage-post.php" method="post">
|
| + <input type="submit">
|
| + <select name="dangling"><option label="yay">
|
| + `,
|
| + `
|
| + <form action="/security/resources/postmessage-post.php" method="post" id="form">
|
| + <input type="submit">
|
| + </form>
|
| + <select name="dangling" form="form"><option label="yay">
|
| + `
|
| + ];
|
| +
|
| + tests.forEach(markup => {
|
| + async_test(t => {
|
| + var i = createFrame(`${markup}sekrit<element attribute></element>`);
|
| + assert_no_submission(t, i);
|
| + }, markup.replace(/[\n\r]/g, ''));
|
| + });
|
| +</script>
|
| +
|
|
|
Chromium Code Reviews
Issue 2628723004:
Experiment with restricting form submission with open elements. (Closed)
