summaryrefslogtreecommitdiffstats
path: root/dom/security/test/csp/file_iframe_sandbox_srcdoc.html
blob: bc700ed68fb314ec5337afb70c768885b1e3216d (plain)
1
2
3
4
5
6
7
8
9
10
11
<!DOCTYPE HTML>
<html>
<head>
  <meta charset="utf-8">
  <title>Bug 1073952 - CSP should restrict scripts in srcdoc iframe even if sandboxed</title>
</head>
<body>
<iframe srcdoc="<img src=x onerror='parent.postMessage({result: `unexpected-csp-violation`}, `*`);'>"
        sandbox="allow-scripts"></iframe>
</body>
</html>