| <html> |
| <head> |
| <script src="/js-test-resources/js-test-pre.js"></script> |
| <script src="resources/cross-frame-access.js"></script> |
| <script> |
| jsTestIsAsync = true; |
| |
| // Set up listener for message from iframe |
| addEventListener('message', function(event) { |
| if (event.data == "finishedLoad") |
| doTest(); |
| }, false); |
| |
| |
| doTest = function() |
| { |
| targetWindow = document.getElementById("target").contentWindow; |
| |
| shouldBeNull("Object.getPrototypeOf(targetWindow)"); |
| shouldBeNull("Object.getPrototypeOf(targetWindow.location)"); |
| protoGetter = Object.getOwnPropertyDescriptor(Object.prototype, '__proto__').get; |
| shouldBeNull("protoGetter.call(targetWindow)"); |
| shouldBeNull("protoGetter.call(targetWindow.location)"); |
| |
| shouldThrowErrorName("targetWindow.history", "SecurityError"); |
| |
| finishJSTest(); |
| } |
| </script> |
| </head> |
| <body> |
| <div>This tests that you can't get the prototype of the window or history objects cross-origin using Object.getPrototypeOf().</div> |
| <iframe id="target" src="http://localhost:8000/security/resources/cross-frame-iframe-for-object-getPrototypeOf-test.html"></iframe> |
| <pre id="console"></pre> |
| <script src="/js-test-resources/js-test-post.js"></script> |
| </body> |
| </html> |
