browser/components/sessionstore/test/browser_911547_sample.html

Thu, 15 Jan 2015 21:03:48 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Thu, 15 Jan 2015 21:03:48 +0100
branch
TOR_BUG_9701
changeset 11
deefc01c0e14
permissions
-rw-r--r--

Integrate friendly tips from Tor colleagues to make (or not) 4.5 alpha 3;
This includes removal of overloaded (but unused) methods, and addition of
a overlooked call to DataStruct::SetData(nsISupports, uint32_t, bool.)

     1 <!DOCTYPE html>
     2 <html>
     3   <head>
     4     <title>Test 911547</title>
     5   </head>
     6 <body>
     8   <!--
     9    this element gets modified by an injected script;
    10    that script should be blocked by CSP.
    11    Inline scripts can modify it, but not data uris.
    12   -->
    13   <input type="text" id="test_id" value="ok">
    15   <a id="test_data_link" href="data:text/html,<input type='text' id='test_id2' value='ok'/> <script>document.getElementById('test_id2').value = 'fail';</script>">Test Link</a>
    17 </body>
    18 </html>

mercurial