third_party/WebKit/LayoutTests/http/tests/security/xss-DENIED-contentWindow-eval.html

   1 <body>
   2 This test passes if alert() is not called.
   3 <script>
   4 if (window.testRunner) {
   5     testRunner.dumpAsText();
   6     testRunner.waitUntilDone();
   7 }
   8
   9 i = document.body.appendChild(document.createElement("iframe"));
  10 f = frames[0].eval('(function(){location="javascript:alert(location)"})');
  11 i.src = "http://localhost:8000/security/resources/innocent-victim.html";
  12 i.addEventListener("load", f);
  13 i.addEventListener("load", function() {
  14     if (window.testRunner)
  15         testRunner.notifyDone();
  16 });
  17 </script>