Wed, 31 Dec 2014 06:09:35 +0100
Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.
michael@0 | 1 | <!DOCTYPE html> |
michael@0 | 2 | <html> |
michael@0 | 3 | <head> |
michael@0 | 4 | <base href="http://example.org/tests/content/html/document/test/bug445004-outer.html"> |
michael@0 | 5 | <script>document.domain = "example.org"</script> |
michael@0 | 6 | </head> |
michael@0 | 7 | <body> |
michael@0 | 8 | <iframe width="500" height="200" src="javascript:"<!DOCTYPE html> <html> <script> function $(str) { return document.getElementById(str); } function hookLoad(str) { $(str).onload = function() { window.parent.parent.postMessage('end', '*'); }; window.parent.parent.postMessage('start', '*'); } window.onload = function() { hookLoad(\"w\"); $(\"w\").contentWindow.location.href = \"example.org.png\"; hookLoad(\"x\"); var doc = $(\"x\").contentDocument; doc.write('<img src=\"example.org.png\">'); doc.close(); }; function doIt() { hookLoad(\"y\"); $(\"y\").contentWindow.location.href = \"example.org.png\"; hookLoad(\"z\"); var doc = $(\"z\").contentDocument; doc.write('<img src=\"example.org.png\">'); doc.close(); } </script> <body> <iframe name=\"w\" id=\"w\" width=\"100\" height=\"100\"></iframe> <iframe name=\"x\" id=\"x\" width=\"100\" height=\"100\"></iframe> <iframe name=\"y\" id=\"y\" width=\"100\" height=\"100\"></iframe> <iframe name=\"z\" id=\"z\" width=\"100\" height=\"100\"></iframe><img src=\"example.org.png\"> </body> </html>" " |
michael@0 | 9 | onload="window.frames[0].doIt();"></iframe> |
michael@0 | 10 | </body> |
michael@0 | 11 | </html> |