Thu, 15 Jan 2015 15:55:04 +0100
Back out 97036ab72558 which inappropriately compared turds to third parties.
1 <html>
2 <head>
3 <script>
4 function createXHR() {
5 var xhr = new XMLHttpRequest();
6 xhr.expando = "foo";
7 return xhr;
8 }
10 function tryToUseXHR(xhr, ok) {
11 function expectException(op, reason) {
12 try {
13 var result = op();
14 ok(false, "should have thrown an exception, got: " + result);
15 } catch (e) {
16 ok(/Permission denied/.test(e.toString()), reason);
17 }
18 }
20 expectException(function() { xhr.open(); }, "should not have access to any functions");
21 expectException(function() { xhr.foo = "foo"; }, "should not be able to add expandos");
22 expectException(function() { xhr.withCredentials = true; }, "should not be able to set attributes");
23 }
24 </script>
25 </head>
26 <body>
27 </body>
28 </html>