LayoutTests/http/tests/security/dataURL/xss-DENIED-to-data-url-window-open.html - WebKit - Git at Google

 <html>
 <head>
     <script src="../resources/cross-frame-access.js"></script>
     <script>
         if (window.testRunner) {
             testRunner.dumpAsText();
             testRunner.waitUntilDone();
             testRunner.setCanOpenWindows();
         }

         var openedWindow;

         function loaded() {
             var url = "data:text/html,<html>"
                 + "<head>"
                 +     "<scr" + "ipt>"
                 +         "function fireSentinel() {"
                 +             "if (window.testRunner)"
                 +                 "testRunner.globalFlag = true;"
                 +         "}"
                 +     "</scr" + "ipt>"
                 + "</head>"
                 + "<body onload=\"fireSentinel();\">"
                 +     "<p>Opened Frame</p>"
                 +     "<p id='accessMe'>PASS: Cross frame access from an opener frame was denied</p>"
                 + "</body>"
                 + "</html>";

             openedWindow = window.open(url);

             if (window.testRunner) {
                 setTimeout(waitForFlag, 1);
                 function waitForFlag() {
                     if (!testRunner.globalFlag) {
                         setTimeout(waitForFlag, 1);
                         return;
                     }
                     performTest();
                 }
             } else {
                 log("Click the button when all the subframes have finished loading.");
             }
         }

         function performTest() {
             try {
                 openedWindow.document.getElementById('accessMe').innerHTML = 'FAIL: Access to a window opened with a data: URL was allowed.';
             } catch (e) {
                 console.log(e);
             }

             if (window.testRunner)
                 closeWindowAndNotifyDone(openedWindow);
         }
     </script>
 </head>
 <body onload="loaded();">
     <p>Opener Frame</p>
     <button onclick="performTest()">Test</button>
     <pre id="console"></pre>
 </body>
 </html>
	<html>
	<head>
	<script src="../resources/cross-frame-access.js"></script>
	<script>
	if (window.testRunner) {
	testRunner.dumpAsText();
	testRunner.waitUntilDone();
	testRunner.setCanOpenWindows();
	}

	var openedWindow;

	function loaded() {
	var url = "data:text/html,<html>"
	+ "<head>"
	+ "<scr" + "ipt>"
	+ "function fireSentinel() {"
	+ "if (window.testRunner)"
	+ "testRunner.globalFlag = true;"
	+ "}"
	+ "</scr" + "ipt>"
	+ "</head>"
	+ "<body onload=\"fireSentinel();\">"
	+ "<p>Opened Frame</p>"
	+ "<p id='accessMe'>PASS: Cross frame access from an opener frame was denied</p>"
	+ "</body>"
	+ "</html>";

	openedWindow = window.open(url);

	if (window.testRunner) {
	setTimeout(waitForFlag, 1);
	function waitForFlag() {
	if (!testRunner.globalFlag) {
	setTimeout(waitForFlag, 1);
	return;
	}
	performTest();
	}
	} else {
	log("Click the button when all the subframes have finished loading.");
	}
	}

	function performTest() {
	try {
	openedWindow.document.getElementById('accessMe').innerHTML = 'FAIL: Access to a window opened with a data: URL was allowed.';
	} catch (e) {
	console.log(e);
	}

	if (window.testRunner)
	closeWindowAndNotifyDone(openedWindow);
	}
	</script>
	</head>
	<body onload="loaded();">
	<p>Opener Frame</p>
	<button onclick="performTest()">Test</button>
	<pre id="console"></pre>
	</body>
	</html>