| <script> |
| if (window.testRunner) { |
| testRunner.dumpAsText(); |
| testRunner.dumpChildFramesAsText(); |
| testRunner.waitUntilDone(); |
| } |
| var o = Object; |
| function finish() |
| { |
| if (Object.getOwnPropertyDescriptor(this, "Object").value === o) |
| document.getElementById("console").innerHTML += "PASS: cross-site assignment of Object constructor not allowed<br/>"; |
| else |
| document.getElementById("console").innerHTML += "FAIL: cross-site assignment of Object constructor was allowed!<br/>"; |
| |
| if (Object.getOwnPropertyDescriptor(this, "newProperty") === undefined) |
| document.getElementById("console").innerHTML += "PASS: cross-site assignment of new property not allowed<br/>"; |
| else |
| document.getElementById("console").innerHTML += "FAIL: cross-site assignment of new property was allowed!<br/>"; |
| |
| if (location.hash.length == 0) |
| document.getElementById("console").innerHTML += "PASS: cross-site assignment of location.hash not allowed<br/>"; |
| else |
| document.getElementById("console").innerHTML += "FAIL: cross-site assignment of location.hash was allowed!<br/>"; |
| |
| if (location.search.length == 0) |
| document.getElementById("console").innerHTML += "PASS: cross-site assignment of location.search not allowed<br/>"; |
| else |
| document.getElementById("console").innerHTML += "FAIL: cross-site assignment of location.search was allowed!<br/>"; |
| |
| if (!("newProperty" in location)) |
| document.getElementById("console").innerHTML += "PASS: cross-site assignment of location.newProperty not allowed<br/>"; |
| else |
| document.getElementById("console").innerHTML += "FAIL: cross-site assignment of location.newProperty was allowed!<br/>"; |
| |
| if (location.reload != "hax0red") |
| document.getElementById("console").innerHTML += "PASS: cross-site assignment of location.reload not allowed<br/>"; |
| else |
| document.getElementById("console").innerHTML += "FAIL: cross-site assignment of location.reload was allowed!<br/>"; |
| |
| if (window.testRunner) |
| testRunner.notifyDone(); |
| } |
| </script> |
| |
| <body onload="finish()"> |
| <iframe width=70% height=300 src="http://localhost:8000/security/resources/xss-DENIED-defineProperty-attacker.html"></iframe> |
| <div id="console"></div> |
| </body> |
| </html> |
