| OLD | NEW |
| 1 <!DOCTYPE html> | 1 <!DOCTYPE html> |
| 2 <!-- | 2 <!-- |
| 3 Copyright (c) 2012, the Dart project authors. Please see the AUTHORS file | 3 Copyright (c) 2012, the Dart project authors. Please see the AUTHORS file |
| 4 for details. All rights reserved. Use of this source code is governed by a | 4 for details. All rights reserved. Use of this source code is governed by a |
| 5 BSD-style license that can be found in the LICENSE file. | 5 BSD-style license that can be found in the LICENSE file. |
| 6 --> | 6 --> |
| 7 <html lang="en"> | 7 <html lang="en"> |
| 8 <head> | 8 <head> |
| 9 <meta charset="utf-8"> | 9 <meta charset="utf-8"> |
| 10 <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"> | 10 <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"> |
| 11 <script type="application/javascript" src="testing.js"></script> | 11 <script type="application/javascript" src="testing.js"></script> |
| 12 </head> | 12 </head> |
| 13 <body> | 13 <body> |
| 14 <!-- Tests that you can inject any URL using SafeUri. --> | 14 <!-- Tests that you can inject any URL using SafeUri. --> |
| 15 Expect 1 console message: "m2", there should be no message for m1, m3, m4 | 15 Expect 1 console message: "m2", there should be no message for m1, m3, m4 |
| 16 <a href="{{m1}}"></a> | 16 <a href="{{m1}}"></a> |
| 17 <a href="{{m2}}"></a> | 17 <a href="{{m2}}"></a> |
| 18 <a href="javascript:{{m3}}"></a> | 18 <a href="javascript:{{m3}}"></a> |
| 19 <a href="javascript:{{m4}}"></a> | 19 <a href="javascript:{{m4}}"></a> |
| 20 <script type="application/dart"> | 20 <script type="application/dart"> |
| 21 import 'dart:html'; | 21 import 'dart:html'; |
| 22 import 'package:web_components/safe_html.dart'; | 22 import 'package:web_ui/safe_html.dart'; |
| 23 | 23 |
| 24 var m1 = 'javascript:window.console.log("m1")'; | 24 var m1 = 'javascript:window.console.log("m1")'; |
| 25 var m2 = new SafeUri.unsafe('javascript:window.console.log("m2")'); | 25 var m2 = new SafeUri.unsafe('javascript:window.console.log("m2")'); |
| 26 var m3 = 'window.console.log("m3")'; | 26 var m3 = 'window.console.log("m3")'; |
| 27 var m4 = new SafeUri.unsafe('window.console.log("m4")'); | 27 var m4 = new SafeUri.unsafe('window.console.log("m4")'); |
| 28 var html = new SafeHtml.unsafe('<span>hello</span>'); | 28 var html = new SafeHtml.unsafe('<span>hello</span>'); |
| 29 main() { | 29 main() { |
| 30 window.setTimeout(() { | 30 window.setTimeout(() { |
| 31 document.queryAll('a').forEach((tag) { | 31 document.queryAll('a').forEach((tag) { |
| 32 tag.on.click.dispatch( | 32 tag.on.click.dispatch( |
| 33 new MouseEvent('click', window, 1, 0, 0, 0, 0, 0)); | 33 new MouseEvent('click', window, 1, 0, 0, 0, 0, 0)); |
| 34 }); | 34 }); |
| 35 | 35 |
| 36 window.setTimeout(() => window.postMessage('done', '*'), 0); | 36 window.setTimeout(() => window.postMessage('done', '*'), 0); |
| 37 }, 0); | 37 }, 0); |
| 38 } | 38 } |
| 39 </script> | 39 </script> |
| 40 </body> | 40 </body> |
| 41 </html> | 41 </html> |
| OLD | NEW |