| <!DOCTYPE html> |
| <html> |
| <head> |
| <script src="../../resources/js-test-pre.js"></script> |
| </head> |
| <body onload="runTest()"> |
| <iframe id="crossOriginFrame" src="http://localhost:8000/security/resources/blank.html"></iframe> |
| <iframe id="sameOriginFrame" src="about:blank"></iframe> |
| <script> |
| description("Tests that iframe.contentDocument is not accessible cross-origin."); |
| jsTestIsAsync = true; |
| |
| function shouldThrowOrReturnUndefinedOrNull(expression) |
| { |
| try { |
| result = eval(expression); |
| } catch (e) { |
| testPassed(expression + " threw exception " + e + "."); |
| return; |
| } |
| if (result === undefined) |
| testPassed(expression + " returned undefined."); |
| else if (result === null) |
| testPassed(expression + " returned null."); |
| else |
| testFailed(expression + " returned " + result); |
| } |
| |
| function runTest() |
| { |
| crossOriginFrame = document.getElementById("crossOriginFrame"); |
| sameOriginFrame = document.getElementById("sameOriginFrame"); |
| |
| shouldThrowOrReturnUndefinedOrNull('crossOriginFrame.contentDocument'); |
| shouldThrowOrReturnUndefinedOrNull('Object.getOwnPropertyDescriptor(sameOriginFrame.__proto__, "contentDocument").get.call(crossOriginFrame)'); |
| shouldThrowOrReturnUndefinedOrNull('Object.getOwnPropertyDescriptor(crossOriginFrame.__proto__, "contentDocument").get.call(crossOriginFrame)'); |
| shouldThrowOrReturnUndefinedOrNull('Object.getOwnPropertyDescriptor(crossOriginFrame, "contentDocument")'); |
| finishJSTest(); |
| } |
| </script> |
| </body> |
| <script src="../../resources/js-test-post.js"></script> |
| </html> |
