LayoutTests/http/tests/security/window-named-valueOf.html - Issue 8090001: Merge 96341 - We should ignore the return value of GetRealNamedProperty

Side by Side Diff

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Keyboard Shortcuts

	File
u :	up to issue
j / k :	jump to file after / before current file
J / K :	jump to next file with a comment after / before current file
	Side-by-side diff
i :	toggle intra-line diffs
e :	expand all comments
c :	collapse all comments
s :	toggle showing all comments
n / p :	next / previous diff chunk or comment
N / P :	next / previous comment
<Up> / <Down> :	next / previous line

	Issue
u :	up to list of issues
j / k :	jump to patch after / before current patch
o / <Enter> :	open current patch in side-by-side view
i :	open current patch in unified diff view

	Issue List
j / k :	jump to issue after / before current issue
o / <Enter> :	open current issue

Side by Side Diff: LayoutTests/http/tests/security/window-named-valueOf.html

Issue 8090001: Merge 96341 - We should ignore the return value of GetRealNamedProperty (Closed) Base URL: http://svn.webkit.org/repository/webkit/branches/chromium/874/

Patch Set: Created 9 years, 2 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View unified diff | Download patch

OLD	NEW
1 <script>	1 <script>

2 if (window.layoutTestController) {	2 if (window.layoutTestController) {

3 layoutTestController.dumpAsText();	3 layoutTestController.dumpAsText();

4 layoutTestController.waitUntilDone();	4 layoutTestController.waitUntilDone();

5 layoutTestController.setCanOpenWindows();	5 layoutTestController.setCanOpenWindows();

6 layoutTestController.setCloseRemainingWindowsWhenComplete(true);	6 layoutTestController.setCloseRemainingWindowsWhenComplete(true);

7 }	7 }

8 </script>	8 </script>

9 <body>	9 <body>

10 This passes if it doesn't alert the contents of innocent-victim.	10 This passes if it doesn't alert the contents of innocent-victim.

(...skipping 12 matching lines...) Expand all Loading...
23 obj.__proto__.__proto__ = parent;	23 obj.__proto__.__proto__ = parent;

24 alert(obj.valueOf.constructor("return document.body.innerHTML")( ));	24 alert(obj.valueOf.constructor("return document.body.innerHTML")( ));

25 } catch(ex) {	25 } catch(ex) {

26 }	26 }

27 if (window.layoutTestController)	27 if (window.layoutTestController)

28 layoutTestController.notifyDone();	28 layoutTestController.notifyDone();

29 } + ")()</scr" + "ipt>";	29 } + ")()</scr" + "ipt>";

30 }	30 }

31 }	31 }

32 </script>	32 </script>

OLD	NEW

« no previous file with comments | « no previous file | LayoutTests/http/tests/security/window-named-valueOf-expected.txt » ('j') | no next file with comments »