blob: fd77bfa42f57613e3d3d990e83afdb2b6e57de46 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
|
<!DOCTYPE html>
<meta charset="utf-8">
<title>iframe 'sandbox' ASCII case insensitive</title>
<link rel="help" href="https://html.spec.whatwg.org/multipage/#attr-iframe-sandbox">
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
<body>
<script>
async_test(function(t) {
let iframe = document.createElement('iframe');
iframe.setAttribute('sandbox', 'allow-same-or\u0130gin');
iframe.setAttribute('hidden', '');
assert_true(iframe.sandbox.supports('allow-same-origin'), 'supports the allow-same-origin token');
iframe.src = 'support/blank.htm';
iframe.onload = t.step_func_done(function() {
try {
assert_equals(iframe.contentDocument, null, 'child document not reachable');
} catch (e) {
// The assert_equals throwing is a pass.
}
});
document.body.appendChild(iframe);
}, document.title + ', allow-same-or\u0130gin');
async_test(function(t) {
let iframe = document.createElement('iframe');
iframe.setAttribute('sandbox', 'allow-\u017Fcripts');
iframe.setAttribute('hidden', '');
assert_true(iframe.sandbox.supports('allow-scripts'), 'supports the allow-scripts token');
window.onmessage = t.unreached_func('no scripts should run in the iframe');
iframe.src = 'support/sandbox_allow_script.html';
iframe.onload = t.step_func(function() {
t.step_timeout(t.step_func_done(), 100);
});
document.body.appendChild(iframe);
}, document.title + ', allow-\u017Fcripts');
</script>
|
