Chromium Code Reviews Chromium Code Reviews
Issue 431273006:
Fixing the case where mixed content checking for insecure form submission in secure origins is brea… (Closed)
Base URL: https://chromium.googlesource.com/chromium/blink.git@master| Index: LayoutTests/http/tests/security/mixedContent/resources/frame-with-invisible-DOM-with-insecure-form.html |
| diff --git a/LayoutTests/http/tests/security/mixedContent/resources/frame-with-invisible-DOM-with-insecure-form.html b/LayoutTests/http/tests/security/mixedContent/resources/frame-with-invisible-DOM-with-insecure-form.html |
| new file mode 100644 |
| index 0000000000000000000000000000000000000000..5178679c3aa4b2beb2d4d2b30b247d82d4134334 |
| --- /dev/null |
| +++ b/LayoutTests/http/tests/security/mixedContent/resources/frame-with-invisible-DOM-with-insecure-form.html |
| @@ -0,0 +1,15 @@ |
| +<script> |
| +function load_content() { |
| + var inv_doc = document.implementation.createHTMLDocument(""); |
|
jww
2014/08/01 23:20:52
nit: make this a more explicit variable name, like
mhm
2014/08/01 23:28:44
Done.
|
| + inv_doc.body.innerHTML = '<html><body><form action="http://127.0.0.1:8080/security/resources/boring.html" method="post"></form></body></html>'; |
| +} |
| + |
| +window.addEventListener("DOMContentLoaded", function listener() { load_content(); }, false); |
| +</script> |
| + |
| +<script> |
| +window.onload = function() { |
| + if (window.opener) |
| + window.opener.postMessage('done', '*'); |
| +}; |
| +</script> |
