repo.or.cz
/
chromium-blink-merge.git
/
blob
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
log
|
graphiclog1
|
graphiclog2
|
commit
|
commitdiff
|
tree
|
refs
|
edit
|
fork
blame
|
history
|
raw
|
HEAD
Merge Chromium + Blink git repositories
[chromium-blink-merge.git]
/
third_party
/
WebKit
/
LayoutTests
/
fast
/
parser
/
resources
/
set-parent-to-javascript-url.html
blob
a64b9a0335b0220a3fcec8697b577df6b1b41946
1
<script>
2
alert
(
1
);
3
parent
.
document
.
getElementsByTagName
(
'iframe'
)[
0
].
src
=
"javascript:alert(2),'PASS<script>alert(3)<\/script>'"
;
4
alert
(
4
);
5
parent
.
setTimeout
(
"done()"
,
0
);
6
</script>