| <script> |
| if (window.testRunner) { |
| testRunner.dumpAsText(); |
| testRunner.dumpChildFramesAsText(); |
| testRunner.waitUntilDone(); |
| } |
| |
| addEventListener("message", function() { |
| // Call injected function. |
| try { |
| attack(); |
| } catch (e) { |
| // V8 throws a TypeError: Cannot set property 'fail' of undefined. |
| } |
| |
| // Post message to victim to check if it was accessed. |
| document.getElementById('theFrame').contentWindow.postMessage("test", "*"); |
| }, false); |
| </script> |
| <body> |
| <p>Test cross-origin direct document access.</p> |
| <iframe id="theFrame" name="theFrame" src="resources/cross-frame-iframe-for-document-direct-test.html"></iframe> |
| </body> |
| </html> |
