OLD | NEW |
1 <html> | 1 <html> |
2 <head> | 2 <head> |
3 <script src="resources/cross-frame-access.js"></script> | 3 <script src="resources/cross-frame-access.js"></script> |
4 <script> | 4 <script> |
5 var windowConstructorPropertiesNotAllowed = [ | 5 var windowConstructorPropertiesNotAllowed = [ |
6 "Attr", | 6 "Attr", |
7 "Audio", | 7 "Audio", |
8 "CDATASection", | 8 "CDATASection", |
9 "CSSPrimitiveValue", | 9 "CSSPrimitiveValue", |
10 "CSSRule", | 10 "CSSRule", |
(...skipping 265 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
276 ]; | 276 ]; |
277 for (var i = 0; i < locationProperties.length; i++) | 277 for (var i = 0; i < locationProperties.length; i++) |
278 shouldBeFalse("canGetDescriptor(targetLocation, '" + locationPro
perties[i] + "')"); | 278 shouldBeFalse("canGetDescriptor(targetLocation, '" + locationPro
perties[i] + "')"); |
279 var locationPropertiesAllowed = [ | 279 var locationPropertiesAllowed = [ |
280 "assign", "replace" | 280 "assign", "replace" |
281 ]; | 281 ]; |
282 for (var i = 0; i < locationPropertiesAllowed.length; i++) | 282 for (var i = 0; i < locationPropertiesAllowed.length; i++) |
283 shouldBeTrue("canGetDescriptor(targetLocation, '" + locationProp
ertiesAllowed[i] + "')"); | 283 shouldBeTrue("canGetDescriptor(targetLocation, '" + locationProp
ertiesAllowed[i] + "')"); |
284 | 284 |
285 log("----- tests access to cross domain history object -----"); | 285 log("----- tests access to cross domain history object -----"); |
286 window.targetHistory = targetWindow.history; | 286 shouldThrowException("targetWindow.history"); |
287 var historyProperties = [ | |
288 "length", "back", "forward", "go", "pushState", "replaceState",
"customProperty" | |
289 ]; | |
290 for (var i = 0; i < historyProperties.length; i++) | |
291 shouldBeFalse("canGetDescriptor(targetHistory, '" + historyPrope
rties[i] + "')"); | |
292 } | 287 } |
293 </script> | 288 </script> |
294 </head> | 289 </head> |
295 <body> | 290 <body> |
296 <p>This test checks cross-frame access security of getOwnPropertyDescriptor (htt
ps://bugs.webkit.org/show_bug.cgi?id=32119).</p> | 291 <p>This test checks cross-frame access security of getOwnPropertyDescriptor (htt
ps://bugs.webkit.org/show_bug.cgi?id=32119).</p> |
297 <iframe src="http://localhost:8000/security/resources/cross-frame-iframe-for-get
-test.html" style=""></iframe> | 292 <iframe src="http://localhost:8000/security/resources/cross-frame-iframe-for-get
-test.html" style=""></iframe> |
298 <pre id="console"></pre> | 293 <pre id="console"></pre> |
299 </body> | 294 </body> |
300 </html> | 295 </html> |
OLD | NEW |