mirror of
https://github.com/mozilla/gecko-dev.git
synced 2024-12-04 11:26:09 +00:00
ede8c44ef2
This excludes dom/, otherwise the file size is too large for phabricator to handle. This is an autogenerated commit to handle scripts loading mochitest harness files, in the simple case where the script src is on the same line as the tag. This was generated with https://bug1544322.bmoattachments.org/attachment.cgi?id=9058170 using the `--part 2` argument. Differential Revision: https://phabricator.services.mozilla.com/D27456 --HG-- extra : moz-landing-system : lando
76 lines
2.4 KiB
HTML
76 lines
2.4 KiB
HTML
<!DOCTYPE HTML>
|
|
<html>
|
|
<!--
|
|
https://bugzilla.mozilla.org/show_bug.cgi?id=785310
|
|
html5 sandboxed iframe should not be able to perform top navigation with scripts allowed
|
|
-->
|
|
<head>
|
|
<meta charset="utf-8">
|
|
<title>Test for Bug 785310 - iframe sandbox parent navigation by location tests</title>
|
|
<script src="/tests/SimpleTest/SimpleTest.js"></script>
|
|
<link rel="stylesheet" type="text/css" href="/tests/SimpleTest/test.css"/>
|
|
|
|
<script>
|
|
SimpleTest.waitForExplicitFinish();
|
|
|
|
function runScriptNavigationTest(testCase) {
|
|
window.onmessage = function(event) {
|
|
if (event.data != "parentIframe") {
|
|
ok(false, "event.data: got '" + event.data + "', expected 'parentIframe'");
|
|
}
|
|
ok(false, testCase.desc + " - parent navigation was NOT blocked");
|
|
runNextTest();
|
|
};
|
|
try {
|
|
window.parentIframe.childIframe.eval(testCase.script);
|
|
} catch (e) {
|
|
ok(true, testCase.desc + " - " + e.message);
|
|
runNextTest();
|
|
}
|
|
}
|
|
|
|
var testCaseIndex = -1;
|
|
var testCases = [
|
|
{
|
|
desc: "Test 1: parent.location.replace should be blocked even when sandboxed with allow-same-origin allow-top-navigation",
|
|
script: "parent.location.replace('file_parent_navigation_by_location.html')",
|
|
},
|
|
{
|
|
desc: "Test 2: parent.location.assign should be blocked even when sandboxed with allow-same-origin allow-top-navigation",
|
|
script: "parent.location.assign('file_parent_navigation_by_location.html')",
|
|
},
|
|
{
|
|
desc: "Test 3: parent.location.href should be blocked even when sandboxed with allow-same-origin allow-top-navigation",
|
|
script: "parent.location.href = 'file_parent_navigation_by_location.html'",
|
|
},
|
|
{
|
|
desc: "Test 4: parent.location.hash should be blocked even when sandboxed with allow-same-origin allow-top-navigation",
|
|
script: "parent.location.hash = 'wibble'",
|
|
},
|
|
];
|
|
|
|
function runNextTest() {
|
|
++testCaseIndex;
|
|
if (testCaseIndex == testCases.length) {
|
|
SimpleTest.finish();
|
|
return;
|
|
}
|
|
|
|
runScriptNavigationTest(testCases[testCaseIndex]);
|
|
}
|
|
|
|
window.onmessage = runNextTest;
|
|
</script>
|
|
</head>
|
|
<body>
|
|
<a target="_blank" href="https://bugzilla.mozilla.org/show_bug.cgi?id=785310">Mozilla Bug 785310</a>
|
|
<p id="display"></p>
|
|
<div id="content">
|
|
Tests for Bug 785310
|
|
</div>
|
|
|
|
<iframe name="parentIframe" src="file_parent_navigation_by_location.html"></iframe>
|
|
|
|
</body>
|
|
</html>
|