34 lines
895 B
HTML
34 lines
895 B
HTML
<!DOCTYPE HTML>
|
|
<html>
|
|
<head>
|
|
<title>document.write('<img src="http://">')</title>
|
|
<script src="/tests/SimpleTest/SimpleTest.js"></script>
|
|
<script type="text/javascript" src="mixedContentTest.js"></script>
|
|
<link rel="stylesheet" type="text/css" href="/tests/SimpleTest/test.css" />
|
|
|
|
<script class="testbody" type="text/javascript">
|
|
"use strict";
|
|
|
|
async function runTest()
|
|
{
|
|
await isSecurityState("broken", "insecure <img> written dynamically breaks security");
|
|
finish();
|
|
}
|
|
|
|
async function afterNavigationTest()
|
|
{
|
|
await isSecurityState("broken", "security still broken after navigation");
|
|
finish();
|
|
}
|
|
|
|
</script>
|
|
</head>
|
|
|
|
<body>
|
|
<script class="testbody" type="text/javascript">
|
|
"use strict";
|
|
document.write(
|
|
"<img src='http://example.com/tests/security/manager/ssl/tests/mochitest/mixedcontent/moonsurface.jpg' />");
|
|
</script>
|
|
</body>
|
|
</html>
|