Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(513)

Side by Side Diff: LayoutTests/http/tests/security/calling-versus-current.html

Issue 50573004: Don't set document.domain to an IP address fragment. (Closed) Base URL: svn://svn.chromium.org/blink/trunk
Patch Set: missing weboriginexport header Created 7 years, 1 month ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
OLDNEW
1 <iframe src="resources/innocent-victim.html"></iframe> 1 <iframe src="resources/innocent-victim.html"></iframe>
2 <div id="console">FAIL</div> 2 <div id="console">FAIL</div>
3 <script> 3 <script>
4 if (window.testRunner) 4 if (window.testRunner)
5 testRunner.dumpAsText(); 5 testRunner.dumpAsText();
6 6
7 if (window.internals)
8 internals.settings.setTreatIPAddressAsDomain(true);
9
7 window.onload = function() { 10 window.onload = function() {
8 window.f = frames[0].atob; 11 window.f = frames[0].atob;
9 document.domain = "0.0.1"; 12 document.domain = "0.0.1";
10 if (btoa(window.f("PASS")) == "PASS") 13 if (btoa(window.f("PASS")) == "PASS")
11 document.getElementById("console").innerHTML = "PASS" 14 document.getElementById("console").innerHTML = "PASS"
12 } 15 }
13 </script> 16 </script>
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698