content/html/content/test/file_iframe_sandbox_c_if2.html

Thu, 15 Jan 2015 15:59:08 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Thu, 15 Jan 2015 15:59:08 +0100
branch
TOR_BUG_9701
changeset 10
ac0c01689b40
permissions
-rw-r--r--

Implement a real Private Browsing Mode condition by changing the API/ABI;
This solves Tor bug #9701, complying with disk avoidance documented in
https://www.torproject.org/projects/torbrowser/design/#disk-avoidance.

michael@0 1 <!DOCTYPE HTML>
michael@0 2 <html>
michael@0 3 <head>
michael@0 4 <meta charset="utf-8">
michael@0 5 <title>Test for Bug 341604</title>
michael@0 6 <link rel="stylesheet" type="text/css" href="/tests/SimpleTest/test.css"/>
michael@0 7
michael@0 8 </head>
michael@0 9 <script type="text/javascript">
michael@0 10 function ok(result, desc) {
michael@0 11 window.parent.postMessage({ok: result, desc: desc}, "*");
michael@0 12 }
michael@0 13
michael@0 14 function doStuff() {
michael@0 15 ok(false, "documents sandboxed without allow-scripts should NOT be able to run inline scripts");
michael@0 16 }
michael@0 17 </script>
michael@0 18 <script src='file_iframe_sandbox_fail.js'></script>
michael@0 19 <body onLoad='window.parent.postmessage({ok: false, desc: "documents sandboxed without allow-scripts should NOT be able to run script from event handlers"}, "*");doStuff();'>
michael@0 20 I am sandboxed with no permissions
michael@0 21 <img src="about:blank" onerror='ok(false, "documents sandboxed without allow-scripts should NOT be able to run script from event handlers");')>
michael@0 22 </body>
michael@0 23 </html>

mercurial