Index: LayoutTests/http/tests/security/script-onerror-crossorigin-cors.html |
diff --git a/LayoutTests/http/tests/security/script-onerror-crossorigin-cors.html b/LayoutTests/http/tests/security/script-onerror-crossorigin-cors.html |
new file mode 100644 |
index 0000000000000000000000000000000000000000..deeed1c379c605d052a4c6353c815d13e5b18a6c |
--- /dev/null |
+++ b/LayoutTests/http/tests/security/script-onerror-crossorigin-cors.html |
@@ -0,0 +1,27 @@ |
+<!DOCTYPE html> |
+<head> |
+</head> |
+<body> |
+ <script src="../../js-test-resources/js-test-pre.js"></script> |
+ <script> |
+ window.jsTestIsAsync = true; |
+ description("The test passes if 'window.onerror' gets unsanitized information about an exception thrown in a script loaded with a 'crossorigin' attribute, and delivered with valid CORS headers."); |
+ |
+ window.onerror = function(msg, url, line, column, error) { |
+ window.msg = msg; |
+ window.url = url; |
+ window.line = line; |
+ window.column = column; |
+ window.errorObject = error; |
+ shouldBeTrue("/SomeError/.test(msg)"); |
+ shouldBeEqualToString("url", "http://localhost:8000/security/resources/cors-script.php?fail=true&cors=true"); |
+ shouldBe("line", "1"); |
+ shouldBe("column", "0"); |
+ shouldNotBe("window.errorObject", "null"); |
+ finishJSTest(); |
+ } |
+ </script> |
+ <script crossorigin="anonymous" src="http://localhost:8000/security/resources/cors-script.php?fail=true&cors=true"></script> |
+ <script src="../../js-test-resources/js-test-post.js"></script> |
+</body> |
+</html> |