Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(322)

Side by Side Diff: LayoutTests/http/tests/security/XFrameOptions/x-frame-options-ancestors-same-origin-deny.html

Issue 20822002: 'X-Frame-Options: SAMEORIGIN' should check all ancestor frames. (Closed) Base URL: svn://svn.chromium.org/blink/trunk
Patch Set: tests. Created 7 years, 5 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
OLDNEW
(Empty)
1 <!DOCTYPE html>
2 <html>
3 <head>
4 <script>
5 if (window.testRunner) {
6 testRunner.dumpAsText();
7 testRunner.dumpChildFramesAsText();
8 testRunner.dumpResourceLoadCallbacks();
9 }
10 </script>
11 </head>
12 <body>
13 <p>This tests verifies that 'X-Frame-Options: SAMEORIGIN' blocks
14 sameorigin.com -&gt; crossorigin.com -&gt; sameorigin.com ancestor chains.</ p>
15 <p>There should be content in the iframe below, but not in its child frame.< /p>
16 <iframe style="width:500px; height:500px" src="http://localhost:8000/securit y/XFrameOptions/resources/x-frame-options-parent-same-origin-ancestor.html"></if rame>
17 </body>
18 </html>
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698