The Tor Browser: dom/browser-element/mochitest/file_browserElement_XFrameOptionsAllowFrom.html@6474c204b198 (annotated)

dom/browser-element/mochitest/file_browserElement_XFrameOptionsAllowFrom.html@6474c204b198 (annotated)

Wed, 31 Dec 2014 06:09:35 +0100

Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.

 <html>
 <body>
   <!-- Try to load in a frame a cross-origin page which sends:
      "X-Frame-Options: Allow-From http://mochi.test:8888/",
        and a cross-origin page which sends
      "X-Frame-Options: Allow-From http://example.com/". -->
 <script>
 // Make sure these iframes aren't too tall; they both need to fit inside the
 // iframe this page is contained in, without scrolling, in order for the test's
 // screenshots to work properly.
 var frame_src = 'http://example.com/tests/dom/browser-element/mochitest/file_browserElement_XFrameOptionsAllowFrom.sjs';
 var iframe1 = document.createElement('iframe');
 iframe1.height = '300px';
 var iframe2 = document.createElement('iframe');
 iframe2.height = '300px';
 document.body.appendChild(iframe1);
 document.body.appendChild(iframe2);
 iframe1.addEventListener('load', function iframe1Load() {
   iframe1.removeEventListener('load', iframe1Load);
   // This causes our embedder to take a screenshot (and blocks until the
   // screenshot is completed).
   var iframe2Loaded = false;
   iframe2.addEventListener('load', function iframe2Load() {
     iframe2.removeEventListener('load', iframe2Load);
     iframe2Loaded = true;
     alert('finish');
   });
   setTimeout(function() { iframe2.src = frame_src; }, 1000);
 });
 iframe1.src = frame_src + '?iframe1';
 </script>
 </body>
 </html>