Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(100)

Unified Diff: third_party/WebKit/LayoutTests/http/tests/security/dataURL/xss-DENIED-to-data-url-window-open.html

Issue 2702503002: Block renderer-initiated main frame navigations to data URLs (Closed)
Patch Set: Fix Android PDF tests where PDFs should be downloaded Created 3 years, 8 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: third_party/WebKit/LayoutTests/http/tests/security/dataURL/xss-DENIED-to-data-url-window-open.html
diff --git a/third_party/WebKit/LayoutTests/http/tests/security/dataURL/xss-DENIED-to-data-url-window-open.html b/third_party/WebKit/LayoutTests/http/tests/security/dataURL/xss-DENIED-to-data-url-window-open.html
deleted file mode 100644
index ded14067c2ef1acaf2650c9598fc11dd63822422..0000000000000000000000000000000000000000
--- a/third_party/WebKit/LayoutTests/http/tests/security/dataURL/xss-DENIED-to-data-url-window-open.html
+++ /dev/null
@@ -1,47 +0,0 @@
-<html>
-<head>
- <script src="../resources/cross-frame-access.js"></script>
- <script>
- if (window.testRunner) {
- testRunner.dumpAsText();
- testRunner.waitUntilDone();
- testRunner.setCanOpenWindows();
- }
-
- var openedWindow;
-
- function loaded() {
- var url = "data:text/html,<html>"
- + "<head>"
- + "<scr" + "ipt>"
- + "function fireSentinel() {"
- + "window.opener.postMessage('done', '*');"
- + "}"
- + "</scr" + "ipt>"
- + "</head>"
- + "<body onload=\"fireSentinel();\">"
- + "<p>Opened Frame</p>"
- + "<p id='accessMe'>PASS: Cross frame access from an opener frame was denied</p>"
- + "</body>"
- + "</html>";
-
- window.addEventListener('message', performTest);
- openedWindow = window.open(url);
- }
-
- function performTest() {
- try {
- openedWindow.document.getElementById('accessMe').innerHTML = 'FAIL: Access to a window opened with a data: URL was allowed.';
- } catch (e) {
- }
-
- if (window.testRunner)
- closeWindowAndNotifyDone(openedWindow);
- }
- </script>
-</head>
-<body onload="loaded();">
- <p>Opener Frame</p>
- <pre id="console"></pre>
-</body>
-</html>

Powered by Google App Engine
This is Rietveld 408576698