blob: 1f326c34d02830cd78957d163ca84d4c244d58c6 [file] [log] [blame]
<!DOCTYPE html>
<html>
<head>
<script>
if (window.testRunner) {
testRunner.dumpAsText();
testRunner.dumpChildFramesAsText();
testRunner.dumpResourceLoadCallbacks();
testRunner.waitUntilDone();
}
function checkIfDone() {
try {
var url = document.querySelector('iframe').contentWindow.location.href;
if (url)
console.log("FAIL: Could read contentWindow.location.href");
else
throw null;
} catch (e) {
if (e)
console.log(e);
console.log("PASS: Could not read contentWindow.location.href");
}
testRunner.notifyDone();
}
</script>
</head>
<body>
<p>The frame below should not load, proving that 'sameorigin, sameorigin' === 'sameorigin'.</p>
<iframe style="width:500px; height:500px" src="http://localhost:8000/security/XFrameOptions/resources/x-frame-options-multiple-headers-sameorigin.cgi" onload="checkIfDone()"></iframe>
</body>
</html>