<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN">
<html>
  <body>
    <script src="../resources/securitypolicy-tests-base.js"></script>
    <script>
      if (document.securityPolicy.allowsFormAction('http://example.com/'))
          log('PASS form action is allowed when no policy exists.');
      else
          log('FAIL form action is not allowed when no policy exists.');


      injectPolicy("form-action http://notexample.com;");

      if (!document.securityPolicy.allowsFormAction('http://example.com/'))
          log('PASS form action is not allowed when policy exists.');
      else
          log('FAIL form action is allowed when policy exists.');
    </script>
  </body>
</html>