Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(353)

Unified Diff: LayoutTests/http/tests/security/mixedContent/insecure-formSubmission-in-invisible-DOM.html

Issue 431273006: Fixing the case where mixed content checking for insecure form submission in secure origins is brea… (Closed) Base URL: https://chromium.googlesource.com/chromium/blink.git@master
Patch Set: Created 6 years, 5 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: LayoutTests/http/tests/security/mixedContent/insecure-formSubmission-in-invisible-DOM.html
diff --git a/LayoutTests/http/tests/security/mixedContent/insecure-formSubmission-in-invisible-DOM.html b/LayoutTests/http/tests/security/mixedContent/insecure-formSubmission-in-invisible-DOM.html
new file mode 100644
index 0000000000000000000000000000000000000000..5ffe8f3c1084094f0a57056bf4d843e70fd4c1ce
--- /dev/null
+++ b/LayoutTests/http/tests/security/mixedContent/insecure-formSubmission-in-invisible-DOM.html
@@ -0,0 +1,23 @@
+<html>
+<body>
+<script>
+if (window.testRunner) {
+ testRunner.waitUntilDone();
+ testRunner.dumpAsText();
+ testRunner.setCanOpenWindows();
+ testRunner.setCloseRemainingWindowsWhenComplete(true);
+}
+
+window.addEventListener("message", function(e) {
+ if (window.testRunner)
+ testRunner.notifyDone();
+}, false);
+</script>
+
+<p>This test opens a window that has an invisible DOM created using "createHTMLDocument" with a form pointing to an insecure location from a secure origin (crbug/398066).</p>
+
+<script>
+window.open("https://127.0.0.1:8443/security/mixedContent/resources/frame-with-invisible-DOM-with-insecure-form.html");
jww 2014/08/01 23:20:52 Why does this need to be a "window.open" and not a
mhm 2014/08/01 23:28:44 just following the pattern with all other mixed co
+</script>
+</body>
+</html>

Powered by Google App Engine
This is Rietveld 408576698