| <script> | |
| if (window.testRunner) { | |
| testRunner.dumpAsText(); | |
| testRunner.waitUntilDone(); | |
| } | |
| function success() | |
| { | |
| document.getElementById("console").innerHTML = "PASS: cross-site assignment of location.pathname not allowed"; | |
| if (window.testRunner) | |
| testRunner.notifyDone(); | |
| } | |
| </script> | |
| <body onload="success()"> | |
| <iframe src="http://localhost:8000/security/resources/xss-DENIED-assign-location-pathname-attacker.html"></iframe> | |
| <div id="console"></div> | |
| </body> | |
| </html> |