third_party/WebKit/LayoutTests/fast/dom/xss-DENIED-javascript-variations.html

   1 <html>
   2 <head>
   3 <script>
   4 if (window.testRunner) {
   5   testRunner.dumpAsText();
   6   testRunner.dumpChildFramesAsText();
   7 }
   8
   9 function runTest() {
  10   var a = window.frames[0];
  11 // java\0script is invalid url.
  12
  13   a.location.href = " javascript:document.write('FAIL')";
  14   a.location.href = "javascript\t:document.write('FAIL')";
  15   a.location.href = "javascript\1:document.write('FAIL')";
  16   a.location.href = "javascript:document.write('FAIL')";
  17
  18
  19   a.location.replace(" javascript:document.write('FAIL')");
  20   a.location.replace("javascript\t:document.write('FAIL')");
  21   a.location.replace("javascript\1:document.write('FAIL')");
  22   a.location.replace("javascript:document.write('FAIL')");
  23
  24   a.location = " javascript:document.write('FAIL')";
  25   a.location = "javascript\t:document.write('FAIL')";
  26   a.location = "javascript\1:document.write('FAIL')";
  27   a.location = "javascript:document.write('FAIL')";
  28 }
  29 </script>
  30
  31 </head>
  32 <body onload="runTest()">
  33 <br>
  34 <iframe name = 'DUPA' src="data:text/html,<p>Inner text should not be replaced.<p>"></iframe>
  35
  36 </body>
  37 </html>