| <!DOCTYPE html> | |
| <script> | |
| if (window.testRunner) | |
| testRunner.dumpAsText(); | |
| if (window.internals) | |
| internals.settings.setContentDispositionAttachmentSandboxEnabled(true); | |
| </script> | |
| <p>This test verifies that cross-origin frames are disabled when 'Content-Disposition: attachment' sandboxing is enabled. A security error will be logged to the console if the test passes.</p> | |
| <iframe src="resources/cross-origin-frames-frame.php"></iframe> |