<html>
<head>
    <script src="resources/cross-frame-access.js"></script>
</head>
<body>
<p>This test checks cross-frame access security (rdar://problem/5251309).</p>
<iframe src="http://localhost:8000/security/resources/cross-frame-iframe-for-get-test.html" style=""></iframe>
<pre id="console"></pre>
<script>
var windowConstructorPropertiesNotAllowed = [
    "Attr", 
    "CDATASection", 
    "CSSPrimitiveValue", 
    "CSSRule", 
    "CSSStyleDeclaration", 
    "CSSValue", 
    "CharacterData", 
    "Comment", 
    "DOMException", 
    "DOMImplementation", 
    "DOMParser", 
    "Document", 
    "DocumentFragment", 
    "DocumentType", 
    "Element", 
    "Entity", 
    "EntityReference", 
    "EvalError", 
    "Event", 
    "HTMLAnchorElement", 
    "HTMLAppletElement", 
    "HTMLAreaElement", 
    "HTMLBRElement", 
    "HTMLBaseElement", 
    "HTMLBaseFontElement", 
    "HTMLBodyElement", 
    "HTMLButtonElement", 
    "HTMLCanvasElement", 
    "HTMLDListElement", 
    "HTMLDirectoryElement", 
    "HTMLDivElement", 
    "HTMLDocument", 
    "HTMLElement", 
    "HTMLFieldSetElement", 
    "HTMLFontElement", 
    "HTMLFormElement", 
    "HTMLFrameElement", 
    "HTMLFrameSetElement", 
    "HTMLHRElement", 
    "HTMLHeadElement", 
    "HTMLHeadingElement", 
    "HTMLHtmlElement", 
    "HTMLIFrameElement", 
    "HTMLImageElement", 
    "HTMLInputElement", 
    "HTMLIsIndexElement", 
    "HTMLLIElement", 
    "HTMLLabelElement", 
    "HTMLLegendElement", 
    "HTMLLinkElement", 
    "HTMLMapElement", 
    "HTMLMarqueeElement", 
    "HTMLMenuElement", 
    "HTMLMetaElement", 
    "HTMLModElement", 
    "HTMLOListElement", 
    "HTMLOptGroupElement", 
    "HTMLOptionElement", 
    "HTMLParagraphElement", 
    "HTMLParamElement", 
    "HTMLPreElement", 
    "HTMLQuoteElement", 
    "HTMLScriptElement", 
    "HTMLSelectElement", 
    "HTMLStyleElement", 
    "HTMLTableCaptionElement", 
    "HTMLTableCellElement", 
    "HTMLTableColElement", 
    "HTMLTableElement", 
    "HTMLTableRowElement", 
    "HTMLTableSectionElement", 
    "HTMLTextAreaElement", 
    "HTMLTitleElement", 
    "HTMLUListElement", 
    "Image", 
    "MutationEvent", 
    "Node", 
    "NodeFilter", 
    "Notation", 
    "Option", 
    "ProcessingInstruction", 
    "Range", 
    "RangeError", 
    "RangeException", 
    "ReferenceError", 
    "SyntaxError", 
    "Text", 
    "TypeError", 
    "URIError", 
    "XMLDocument", 
    "XMLHttpRequest", 
    "XMLSerializer", 
    "XPathEvaluator", 
    "XPathResult", 
    "XSLTProcessor"
];

var windowFunctionPropertiesNotAllowed = [
    "addEventListener", 
    "alert", 
    "atob",
    "btoa", 
    "captureEvents", 
    "clearInterval", 
    "clearTimeout", 
    "confirm",
    "find", 
    "getComputedStyle",
    "getMatchedCSSRules", 
    "getSelection", 
    "moveBy", 
    "moveTo", 
    "open", 
    "print", 
    "prompt", 
    "releaseEvents", 
    "removeEventListener", 
    "resizeBy", 
    "resizeTo", 
    "scroll", 
    "scrollBy", 
    "scrollTo", 
    "setInterval", 
    "setTimeout", 
    "showModalDialog", 
    "stop"
];

var windowAttributesPropertiesNotAllowed = [
    "clientInformation", 
    "console", 
    "crypto", 
    "defaultStatus", 
    "defaultstatus", 
    "devicePixelRatio", 
    "document",
    "embeds",
    "eval",
    "event", 
    "frameElement", 
    "images",
    "innerHeight", 
    "innerWidth", 
    "locationbar", 
    "menubar", 
    "name", 
    "navigator", 
    "offscreenBuffering", 
    "onabort", 
    "onbeforeunload", 
    "onblur", 
    "onchange", 
    "onclick", 
    "ondblclick", 
    "onerror", 
    "onfocus", 
    "onkeydown", 
    "onkeypress", 
    "onkeyup", 
    "onload", 
    "onmousedown", 
    "onmousemove", 
    "onmouseout", 
    "onmouseover", 
    "onmouseup", 
    "onmousewheel", 
    "onreset", 
    "onresize", 
    "onscroll", 
    "onsearch", 
    "onselect", 
    "onsubmit", 
    "onunload", 
    "outerHeight", 
    "outerWidth", 
    "pageXOffset", 
    "pageYOffset", 
    "personalbar", 
    "plugins",
    "screen", 
    "screenLeft", 
    "screenTop", 
    "screenX", 
    "screenY", 
    "scrollX", 
    "scrollY", 
    "scrollbars", 
    "status", 
    "statusbar", 
    "toolbar"
];

var windowFunctionPropertiesAllowed = [
    "blur",
    "close",
    "focus"
]

var windowAttributesPropertiesAllowed = [
    "closed",
    "frames",
    "history",
    "length",
    "opener",
    "parent",
    "self",
    "top",
    "window",
];

window.targetWindow = frames[0];

window.onload = function()
{
    if (window.layoutTestController)
        layoutTestController.dumpAsText();

    log("\n----- tests for getting of allowed properties -----\n");

    log("\n----- tests for getting of allowed Functions -----\n");
    for (var i = 0; i < windowFunctionPropertiesAllowed.length; i++) {
        var property = windowFunctionPropertiesAllowed[i];
        shouldBeTrue("canGet('targetWindow." + property + "')");
    }

    log("\n----- tests for getting of allowed Attributes -----\n");
    for (var i = 0; i < windowAttributesPropertiesAllowed.length; i++) {
        var property = windowAttributesPropertiesAllowed[i];
        shouldBeTrue("canGet('targetWindow." + property + "')");
    }


    log("\n----- tests for getting of not allowed properties -----\n");

    log("\n----- tests for getting of not allowed Constructors -----\n");
    for (var i = 0; i < windowConstructorPropertiesNotAllowed.length; i++) {
        var property = windowConstructorPropertiesNotAllowed[i];
        shouldBeFalse("canGet('targetWindow." + property + "')");
    }

    log("\n----- tests for getting of not allowed Functions -----\n");
    for (var i = 0; i < windowFunctionPropertiesNotAllowed.length; i++) {
        var property = windowFunctionPropertiesNotAllowed[i];
        shouldBeFalse("canGet('targetWindow." + property + "')");
    }

    log("\n----- tests for getting of not allowed Attributes -----\n");
    for (var i = 0; i < windowAttributesPropertiesNotAllowed.length; i++) {
        var property = windowAttributesPropertiesNotAllowed[i];
        if (property == "document")
            log("Firefox allows access to 'document' but throws an exception when you access its properties.");
        shouldBeFalse("canGet('targetWindow." + property + "')");
    }

    // Work around DRT bug that causes subsequent tests to fail.
    window.stop();
}
</script>
</body>
</html>