| <!DOCTYPE HTML> |
| <html> |
| <head> |
| <script src="../resources/js-test-pre.js"></script> |
| </head> |
| <body> |
| <script> |
| description("Tests that URL-based username and password are not revealed in location.href."); |
| |
| window.jsTestIsAsync = true; |
| |
| var frame = document.createElement('iframe'); |
| frame.setAttribute('src', 'http://_username:_password@' |
| + location.host + '/security/resources/blank.html'); |
| |
| document.body.appendChild(frame); |
| |
| frame.onload = function() { |
| var href = frame.contentWindow.location.href; |
| if (href.indexOf('_username') === -1 && |
| href.indexOf('_password') === -1) { |
| testPassed("No username or password in location.href."); |
| } else { |
| testFailed("Either username, password, or both were found in location.href"); |
| } |
| |
| finishJSTest(); |
| }; |
| </script> |
| <script src="../resources/js-test-post.js"></script> |
| </body> |
| </html> |
