dom/plugins/test/mochitest/test_bug813906.html@b8a032363ba2
dom/plugins/test/mochitest/test_bug813906.html
Thu, 22 Jan 2015 13:21:57 +0100
- author
- Michael Schloh von Bennewitz <michael@schloh.com>
- date
- Thu, 22 Jan 2015 13:21:57 +0100
- branch
- TOR_BUG_9701
- changeset 15
- b8a032363ba2
- permissions
- -rw-r--r--
Incorporate requested changes from Mozilla in review:
https://bugzilla.mozilla.org/show_bug.cgi?id=1123480#c6
1 <!doctype html>
2 <html>
3 <head>
4 <title>Test for Bug 813906</title>
5 <script type="application/javascript" src="/tests/SimpleTest/SimpleTest.js"></script>
6 <script type="text/javascript" src="utils.js"></script>
7 <link rel="stylesheet" type="text/css" href="/tests/SimpleTest/test.css"/>
9 <meta http-equiv="content-type" content="text/html; charset=utf-8">
10 <base href="chrome://browser/content/">
11 </head>
12 <body>
14 <script type="application/javascript">
15 function f() {
16 document.getElementsByTagName("base")[0].href = "http://www.safe.com/";
17 }
18 </script>
20 <script type="application/javascript">
21 SimpleTest.waitForExplicitFinish();
22 setTestPluginEnabledState(SpecialPowers.Ci.nsIPluginTag.STATE_ENABLED);
24 var frameLoadCount = 0;
25 function frameLoaded() {
26 frameLoadCount++;
27 if (frameLoadCount == 1) {
28 document.getElementsByTagName("object")[0].type = "application/x-test";
29 document.getElementsByTagName("use")[0].setAttributeNS("http://www.w3.org/1999/xlink", "href", location.href + "#a");
30 } else if (frameLoadCount == 2) {
31 isnot(SpecialPowers.wrap(window.frame1).location.href.indexOf('chrome://'),
32 0, 'plugin shouldnt be able to cause navigation to chrome URLs');
33 SimpleTest.finish();
34 }
35 }
36 </script>
38 <!-- Note that <svg:use> ends up creating an anonymous subtree, which means that the plugin
39 reflector gets hoisted into the XBL scope, and isn't accessible to content. We pass
40 the 'donttouchelement' parameter to the plugin to prevent it from trying to define the
41 'pluginFoundElement' property on the plugin reflector, since doing so would throw a
42 security exception. -->
43 <svg>
44 <symbol id="a">
45 <foreignObject>
46 <object bugmode="813906" frame="frame1"><param name="donttouchelement"></param></object>
47 </foreignObject>
48 </symbol>
49 <use />
50 </svg>
52 <iframe name="frame1" onload="frameLoaded()"></iframe>
53 </body>
54 </html>
