Test assignment to indexed window properties

Test assignment to indexed window properties

The actual bug here was fixed in V8, but we should have a test at the Blink
layer too.

R=adamk
BUG=257748
Committed: https://src.chromium.org/viewvc/blink?view=rev&revision=154714

[adamk, 2013-07-22 23:19:28]

https://codereview.chromium.org/19923006/diff/1/LayoutTests/http/tests/securi...
File LayoutTests/http/tests/security/xss-DENIED-window-index-assign.html
(right):

https://codereview.chromium.org/19923006/diff/1/LayoutTests/http/tests/securi...
LayoutTests/http/tests/security/xss-DENIED-window-index-assign.html:12: <iframe
src="data:text/html,<script>alert(parent[0].a);</script><script>parent[0].f();</script>"></iframe><br>
Does this load synchronously? If not, you may need to make this test async to
make it non-flaky.

[abarth-chromium, 2013-07-22 23:24:52]

https://codereview.chromium.org/19923006/diff/1/LayoutTests/http/tests/securi...
File LayoutTests/http/tests/security/xss-DENIED-window-index-assign.html
(right):

https://codereview.chromium.org/19923006/diff/1/LayoutTests/http/tests/securi...
LayoutTests/http/tests/security/xss-DENIED-window-index-assign.html:12: <iframe
src="data:text/html,<script>alert(parent[0].a);</script><script>parent[0].f();</script>"></iframe><br>
On 2013/07/22 23:19:28, adamk wrote:
> Does this load synchronously?

Nope.  The only frames that load synchronously are about:blank frames.

> If not, you may need to make this test async to make it non-flaky.

The test framework will wait for the "load" event to fire on the top-level frame
before ending the test.  The "load" event on a frame waits for the "load" event
on all subframes, which means this frame will finish loading before the test
ends.

[adamk, 2013-07-22 23:38:52]

lgtm

[commit-bot: I haz the power, 2013-07-22 23:59:18]

CQ is trying da patch. Follow status at
https://chromium-status.appspot.com/cq/abarth@chromium.org/19923006/1

[commit-bot: I haz the power, 2013-07-23 03:42:13]

Change committed as 154714