Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(286)

Side by Side Diff: LayoutTests/http/tests/security/sandboxed-iframe-modify-self-expected.txt

Issue 19932002: Throw exceptions on all failed cross-origin access checks. (Closed) Base URL: svn://svn.chromium.org/blink/trunk
Patch Set: test. Created 7 years, 5 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
OLDNEW
1 CONSOLE MESSAGE: Sandbox access violation: Blocked a frame at "http://127.0.0.1: 8000" from accessing a frame at "http://127.0.0.1:8000". The frame requesting a ccess is sandboxed and lacks the "allow-same-origin" flag. 1 CONSOLE MESSAGE: line 9: Uncaught SecurityError: Sandbox access violation: Block ed a frame at "http://127.0.0.1:8000" from accessing a frame at "http://127.0.0. 1:8000". The frame requesting access is sandboxed and lacks the "allow-same-ori gin" flag.
2 This is a "sanity" test case to verify that a sandboxed frame cannot break out o f its sandbox by modifying its own sandbox attribute. Two attempts are made: 2 This is a "sanity" test case to verify that a sandboxed frame cannot break out o f its sandbox by modifying its own sandbox attribute. Two attempts are made:
3 3
4 First, an attempt is made to modify the sandbox attribute of the "self" object, referring to the frame's window. This should not have any effect (the attribute is associated with the iframe DOM node, not the window). No warning is expected. 4 First, an attempt is made to modify the sandbox attribute of the "self" object, referring to the frame's window. This should not have any effect (the attribute is associated with the iframe DOM node, not the window). No warning is expected.
5 Second, an attempt is made to modify the iframe DOM object's sandbox attribute. A warning message (about cross-site scripting) is expected, and the sandbox attr ibute should remain intact. 5 Second, an attempt is made to modify the iframe DOM object's sandbox attribute. A warning message (about cross-site scripting) is expected, and the sandbox attr ibute should remain intact.
6 This test will print "PASS" on success. 6 This test will print "PASS" on success.
7 7
8 PASS 8 PASS
9 9
10 10
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698