blob: 9d1175acd11dd5cdb412d518bdcef4ea8cbd801e [file] [log] [blame]
<script>
if (window.layoutTestController) {
layoutTestController.dumpAsText();
layoutTestController.waitUntilDone();
}
function success()
{
document.getElementById("console").innerHTML = "PASS: cross-site assignment of location.hostname not allowed";
if (window.layoutTestController)
layoutTestController.notifyDone();
}
</script>
<body onload="success()">
<iframe src="http://localhost:8000/security/resources/xss-DENIED-assign-location-hostname-attacker.html"></iframe>
<div id="console"></div>
</body>
</html>