Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(29)

Unified Diff: third_party/WebKit/LayoutTests/http/tests/security/dataURL/xss-DENIED-from-javascript-url-window-open.html

Issue 2702503002: Block renderer-initiated main frame navigations to data URLs (Closed)
Patch Set: Fix Android PDF tests where PDFs should be downloaded Created 3 years, 8 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: third_party/WebKit/LayoutTests/http/tests/security/dataURL/xss-DENIED-from-javascript-url-window-open.html
diff --git a/third_party/WebKit/LayoutTests/http/tests/security/dataURL/xss-DENIED-from-javascript-url-window-open.html b/third_party/WebKit/LayoutTests/http/tests/security/dataURL/xss-DENIED-from-javascript-url-window-open.html
deleted file mode 100644
index b4a2ff67f0f8291f39c34c34181b8161c0656713..0000000000000000000000000000000000000000
--- a/third_party/WebKit/LayoutTests/http/tests/security/dataURL/xss-DENIED-from-javascript-url-window-open.html
+++ /dev/null
@@ -1,39 +0,0 @@
-<html>
-<head>
- <script src="../resources/cross-frame-access.js"></script>
- <script>
- if (window.testRunner) {
- testRunner.dumpAsText();
- testRunner.setCanOpenWindows();
- testRunner.waitUntilDone();
- }
- function loaded() {
- var url = "data:text/html,<html>"
- + "<head>"
- + "<scr" + "ipt>"
- + "function test() {"
- + "try {"
- + "opener.document.getElementById(\"accessMe\").innerHTML = \"FAIL: Access from a window opened with a data: URL was allowed!\";"
- + "} catch (e) {"
- + "}"
- + "window.opener.postMessage('done', '*');"
- + "}"
- + "</scri" + "pt>"
- + "</head>"
- + "<body onload=\"test();\">"
- + "<p>Opened Frame.</p>"
- + "</body>"
- + "</html>";
-
- window.addEventListener('message', function () {
- closeWindowAndNotifyDone(openedWindow);
- });
- var openedWindow = window.open(url);
- }
- </script>
-</head>
-<body onload="loaded();">
- <p>Opener Frame</p>
- <p id='accessMe'>PASS: Access from a window opened with a data: URL was denied.</p>
-</body>
-</html>

Powered by Google App Engine
This is Rietveld 408576698