<script>
if (window.testRunner) {
    testRunner.dumpAsText();
    testRunner.waitUntilDone();
}

function finish()
{
    if (location.search.length == 0)
        document.getElementById("console").innerHTML = "PASS: cross-site assignment of location.search not allowed";
    else
        document.getElementById("console").innerHTML = "FAIL: cross-site assignment of location.search was allowed!";

    if (window.testRunner)
        testRunner.notifyDone();
}
</script>

<body onload="finish()">

<script>
if (location.search == 0) {
    document.write('<iframe src="http://localhost:8000/security/resources/xss-DENIED-assign-location-search-attacker.html"></iframe>');
}
</script>

<div id="console"></div>
</body>
</html>