| <!DOCTYPE html> |
| <script> |
| if (window.internals) |
| internals.settings.setContentDispositionAttachmentSandboxEnabled(true); |
| if (window.testRunner) { |
| testRunner.dumpAsText(); |
| testRunner.waitUntilDone(); |
| window.addEventListener('load', function() { |
| // Due to the sandbox, it's not possible to run script in the iframe or even access its contentDocument. |
| // Submit the form by clicking its button with synthetic mouse events. |
| var iframeRect = document.getElementsByTagName('iframe')[0].getClientRects()[0]; |
| var submitButtonRect = document.getElementById('submitButtonForMetrics').getClientRects()[0]; |
| |
| // This assumes that the iframe has no border, and its document's body has no margin. |
| var x = iframeRect.left + submitButtonRect.width / 2; |
| var y = iframeRect.top + submitButtonRect.height / 2; |
| |
| eventSender.mouseMoveTo(x, y); |
| eventSender.mouseDown(); |
| eventSender.mouseUp(); |
| testRunner.notifyDone(); |
| }); |
| } |
| </script> |
| <p>This test verifies that form submission is disabled when 'Content-Disposition: attachment' sandboxing is enabled. A security error will be logged to the console if the test passes.</p> |
| <iframe style="border: 0px" src="resources/form-submission-frame.php"></iframe> |
| <input style="visibility: hidden" id="submitButtonForMetrics" type="submit"> |
