Google Git
Sign in
webkit / WebKit / afc29b3c512e74658ad92a96f443a0212a480db2 / . / LayoutTests / fast / dom / xss-DENIED-javascript-variations.html
blob: b99469192742723bffb869eb5393bf4200215485 [file] [log] [blame]
<html>
<head>
<script>
if (window.testRunner) {
testRunner.dumpAsText();
testRunner.dumpChildFramesAsText();
}
function runTest() {
var a = window.frames[0];
// java\0script is invalid url.
a.location.href = " javascript:document.write('FAIL')";
a.location.href = "javascript\t:document.write('FAIL')";
a.location.href = "javascript\1:document.write('FAIL')";
a.location.href = "javascript:document.write('FAIL')";
a.location.replace(" javascript:document.write('FAIL')");
a.location.replace("javascript\t:document.write('FAIL')");
a.location.replace("javascript\1:document.write('FAIL')");
a.location.replace("javascript:document.write('FAIL')");
a.location = " javascript:document.write('FAIL')";
a.location = "javascript\t:document.write('FAIL')";
a.location = "javascript\1:document.write('FAIL')";
a.location = "javascript:document.write('FAIL')";
}
</script>
</head>
<body onload="runTest()">
<br>
<iframe id = 'DUPA' name='DUPA' src="data:text/html,<p>Inner text should not be replaced.<p>"></iframe>
</body>
</html>