dom/security/test/mixedcontentblocker/file_frameNavigation_blankTarget.html


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

<!DOCTYPE HTML>
<html>
<!--
Tests for Mixed Content Blocker - Opening link with _blank target in an https iframe.
https://bugzilla.mozilla.org/show_bug.cgi?id=841850
-->
<head>
  <meta charset="utf-8">
  <title>Tests for Mixed Content Frame Navigation</title>
</head>
<body>
<a href="http://example.com/tests/dom/security/test/mixedcontentblocker/file_frameNavigation_innermost.html?blankTarget" id="blankTarget" target="_blank" rel="opener">Go to http site</a>

<script>
  var blankTarget = document.getElementById("blankTarget");
  blankTarget.click();

  var observer = {
    observe(subject, topic, data) {
    //Subject location check added for Bug 1391823 to avoid removeAsyncObserver from being called multiple times
    if(topic == "content-document-global-created" && data =="http://example.com" && subject.location.href == "http://example.com/tests/dom/security/test/mixedcontentblocker/file_frameNavigation_innermost.html?blankTarget") {
       parent.parent.postMessage({"test": "blankTarget", "msg": "opened an http link with target=_blank from a secure page"}, "http://mochi.test:8888");
       SpecialPowers.removeAsyncObserver(observer, "content-document-global-created");
    }
  }
  }
  SpecialPowers.addAsyncObserver(observer, "content-document-global-created");

</script>
</body>
</html>