blob: ecd6bcd1e30331de6b60ce1935b5fb689fdd036d [file] [log] [blame]
<html>
<body>
<script>
if (window.testRunner) {
testRunner.dumpAsText();
testRunner.dumpFrameLoadCallbacks();
}
</script>
<p>This test loads a secure iframe that loads a plugin without a URL. We should
*not* get a mixed content callback because the plug-in cannot be controlled by
an active network attacker.</p>
<iframe src="https://127.0.0.1:8443/security/mixedContent/resources/frame-with-empty-url-plugin.html"></iframe>
</body>
</html>