OLD | NEW |
1 <html> | 1 <html> |
2 <head> | 2 <head> |
3 <script src="../resources/cross-frame-access.js"></script> | 3 <script src="../resources/cross-frame-access.js"></script> |
4 <script> | 4 <script> |
5 window.onload = function() | 5 window.onload = function() |
6 { | 6 { |
7 if (window.testRunner) { | 7 if (window.testRunner) { |
8 testRunner.dumpAsText(); | 8 testRunner.dumpAsText(); |
9 testRunner.dumpChildFramesAsText(); | 9 testRunner.dumpChildFramesAsText(); |
10 testRunner.waitUntilDone(); | 10 testRunner.waitUntilDone(); |
11 } | 11 } |
12 | 12 |
13 if (window.testRunner) { | 13 window.addEventListener('message', function () |
14 setTimeout(pollForTest, 1); | 14 { |
15 } else { | 15 runTest(); |
16 log("To run the test, click the button below when the opened win
dow finishes loading."); | 16 if (window.testRunner) |
17 var button = document.createElement("button"); | 17 testRunner.notifyDone(); |
18 button.appendChild(document.createTextNode("Run Test")); | 18 }); |
19 button.onclick = runTest; | |
20 document.body.appendChild(button); | |
21 } | |
22 } | |
23 | |
24 pollForTest = function() | |
25 { | |
26 if (!testRunner.globalFlag) { | |
27 setTimeout(pollForTest, 1); | |
28 return; | |
29 } | |
30 runTest(); | |
31 testRunner.notifyDone(); | |
32 } | 19 } |
33 | 20 |
34 runTest = function() | 21 runTest = function() |
35 { | 22 { |
36 try { | 23 try { |
37 window[0][0].document.getElementById('accessMe').innerHTML = "FA
IL: Cross frame access to a javascript: URL embed in a frame on a foreign domain
allowed."; | 24 window[0][0].document.getElementById('accessMe').innerHTML = "FA
IL: Cross frame access to a javascript: URL embed in a frame on a foreign domain
allowed."; |
38 log("FAIL: Cross frame access to a javascript: URL embed in a fr
ame on a foreign domain allowed."); | 25 log("FAIL: Cross frame access to a javascript: URL embed in a fr
ame on a foreign domain allowed."); |
39 return; | 26 return; |
40 } catch (e) { | 27 } catch (e) { |
41 } | 28 } |
42 | 29 |
43 log("PASS: Cross frame access to a javascript: URL embed in a frame
on a foreign domain denied!"); | 30 log("PASS: Cross frame access to a javascript: URL embed in a frame
on a foreign domain denied!"); |
44 } | 31 } |
45 </script> | 32 </script> |
46 </head> | 33 </head> |
47 <body> | 34 <body> |
48 <p>The scenario for this test is that you have an iframe with content from a
foreign domain. In that foreign content | 35 <p>The scenario for this test is that you have an iframe with content from a
foreign domain. In that foreign content |
49 is an iframe which loads a javascript: URL. This tests that this main d
ocument does not have access to that | 36 is an iframe which loads a javascript: URL. This tests that this main d
ocument does not have access to that |
50 javascript: URL loaded iframe.</p> | 37 javascript: URL loaded iframe.</p> |
51 <iframe src="http://localhost:8000/security/javascriptURL/resources/foreign-
domain-javascript-url-accessee-iframe.html" style="width: 400px; height:200px;">
</iframe> | 38 <iframe src="http://localhost:8000/security/javascriptURL/resources/foreign-
domain-javascript-url-accessee-iframe.html" style="width: 400px; height:200px;">
</iframe> |
52 <pre id="console"></pre> | 39 <pre id="console"></pre> |
53 </body> | 40 </body> |
54 </html> | 41 </html> |
OLD | NEW |