diff options
Diffstat (limited to 'testing/web-platform/tests/html/cross-origin-embedder-policy/coep-frame-javascript.https.html')
-rw-r--r-- | testing/web-platform/tests/html/cross-origin-embedder-policy/coep-frame-javascript.https.html | 25 |
1 files changed, 25 insertions, 0 deletions
diff --git a/testing/web-platform/tests/html/cross-origin-embedder-policy/coep-frame-javascript.https.html b/testing/web-platform/tests/html/cross-origin-embedder-policy/coep-frame-javascript.https.html new file mode 100644 index 0000000000..089019dc2e --- /dev/null +++ b/testing/web-platform/tests/html/cross-origin-embedder-policy/coep-frame-javascript.https.html @@ -0,0 +1,25 @@ +<!doctype html> +<meta charset=utf-8> +<script src="/resources/testharness.js"></script> +<script src="/resources/testharnessreport.js"></script> +<script src="/common/get-host-info.sub.js"></script> +<script src="resources/script-factory.js"></script> +<div id=log></div> +<script> +async_test(t => { + window.addEventListener("message", t.step_func_done(({ data }) => { + assert_equals(data.id, ""); + assert_equals(data.origin, window.origin); + assert_true(data.sameOriginNoCORPSuccess); + assert_true(data.crossOriginNoCORPFailure, "Cross-origin without CORP did not fail"); + })); + const frame = document.createElement("iframe"); + t.add_cleanup(() => frame.remove()); + frame.src = "resources/coep-frame.html"; + frame.onload = t.step_func(() => { + frame.onload = null; + frame.src = `javascript:${encodeURIComponent(createScript(window.origin, get_host_info().HTTPS_NOTSAMESITE_ORIGIN))}`; + }); + document.body.append(frame); +}, "Cross-Origin-Embedder-Policy frame and javascript: URLs"); +</script> |