| <html> | |
| <head> | |
| <script> | |
| if (window.testRunner) { | |
| testRunner.waitUntilDone(); | |
| testRunner.dumpAsText(); | |
| } | |
| window.onload = function() | |
| { | |
| object = document.createElement("object"); | |
| object.data = "http://localhost:8000/security/resources/innocent-victim.html"; | |
| document.body.appendChild(object); | |
| object.onload = function() { | |
| object.onload = null; | |
| object.data = "javascript:alert(document.body.innerHTML)"; | |
| object.innerHTML = "foo"; | |
| if (window.testRunner) | |
| setTimeout("testRunner.notifyDone()", 50); | |
| } | |
| } | |
| </script> | |
| </head> | |
| <body> | |
| There should be no alert displayed. | |
| </body> | |
| </html> |