97 lines
3 KiB
HTML
97 lines
3 KiB
HTML
<!doctype html>
|
|
<html>
|
|
<head>
|
|
<title>Dangling Markup in target</title>
|
|
<meta name="timeout" content="long">
|
|
<script src="/resources/testharness.js"></script>
|
|
<script src="/resources/testharnessreport.js"></script>
|
|
<script src="/common/utils.js"></script>
|
|
</head>
|
|
<body>
|
|
<script>
|
|
function anchorClick(target, id) {
|
|
const hyperlink = document.body.appendChild(document.createElement('a'));
|
|
if (target) {
|
|
hyperlink.target = target;
|
|
}
|
|
hyperlink.href = `resources/window-name.sub.html?report=${id}|close`;
|
|
hyperlink.click();
|
|
}
|
|
|
|
async function pollResultAndCheck(t, id, expected) {
|
|
const stashURL = new URL('resources/window-name-stash.py', location);
|
|
stashURL.searchParams.set('id', id);
|
|
|
|
let res = 'NONE';
|
|
while (res == 'NONE') {
|
|
await new Promise(resolve => { t.step_timeout(resolve, 100); });
|
|
|
|
const response = await fetch(stashURL);
|
|
res = await response.text();
|
|
}
|
|
if (res !== expected) {
|
|
assert_unreached('Stash result does not equal expected result.')
|
|
}
|
|
}
|
|
|
|
promise_test(async t => {
|
|
const id = token();
|
|
const value = '\n<' + id;
|
|
|
|
window.open(`resources/window-name.sub.html?report=${id}|close`, value);
|
|
await pollResultAndCheck(t, id, value);
|
|
}, 'Dangling Markup in target is not reset when set by window.open');
|
|
|
|
promise_test(async t => {
|
|
const id = token();
|
|
const value = '\n<' + id;
|
|
|
|
anchorClick(value, id)
|
|
await pollResultAndCheck(t, id, '');
|
|
}, 'Dangling Markup with "\\n" in target is reset when set by <a> tag');
|
|
|
|
promise_test(async t => {
|
|
const id = token();
|
|
const value = '\r<' + id;
|
|
|
|
anchorClick(value, id)
|
|
await pollResultAndCheck(t, id, '');
|
|
}, 'Dangling Markup with "\\r" in target is reset when set by <a> tag');
|
|
|
|
promise_test(async t => {
|
|
const id = token();
|
|
const value = '\t<' + id;
|
|
|
|
anchorClick(value, id)
|
|
await pollResultAndCheck(t, id, '');
|
|
}, 'Dangling Markup with "\\t" in target is reset when set by <a> tag');
|
|
|
|
promise_test(async t => {
|
|
const id = token();
|
|
const value = '\n<' + id;
|
|
|
|
const form = document.body.appendChild(document.createElement('form'));
|
|
form.target = value;
|
|
form.method = 'GET';
|
|
form.action = 'resources/window-name.sub.html';
|
|
const input = form.appendChild(document.createElement('input'));
|
|
input.type = 'hidden';
|
|
input.name = 'report';
|
|
input.value = `${id}|close`;
|
|
form.submit();
|
|
|
|
await pollResultAndCheck(t, id, '');
|
|
}, 'Dangling Markup in target is reset when set by <form> tag');
|
|
|
|
promise_test(async t => {
|
|
const id = token();
|
|
const value = '\n<' + id;
|
|
const base = document.head.appendChild(document.createElement('base'));
|
|
base.target = value;
|
|
|
|
anchorClick(null, id)
|
|
await pollResultAndCheck(t, id, '');
|
|
}, 'Dangling Markup in target is reset when set by <base> tag');
|
|
</script>
|
|
</body>
|
|
</html>
|