diff -r 000000000000 -r 6474c204b198 addon-sdk/source/test/test-frame-utils.js
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/addon-sdk/source/test/test-frame-utils.js	Wed Dec 31 06:09:35 2014 +0100
@@ -0,0 +1,59 @@
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
+'use strict';
+
+const { create } = require('sdk/frame/utils');
+const { open, close } = require('sdk/window/helpers');
+
+exports['test frame creation'] = function(assert, done) {
+  open('data:text/html;charset=utf-8,Window').then(function (window) {
+    let frame = create(window.document);
+
+    assert.equal(frame.getAttribute('type'), 'content',
+                 'frame type is content');
+    assert.ok(frame.contentWindow, 'frame has contentWindow');
+    assert.equal(frame.contentWindow.location.href, 'about:blank',
+                 'by default "about:blank" is loaded');
+    assert.equal(frame.docShell.allowAuth, false, 'auth disabled by default');
+    assert.equal(frame.docShell.allowJavascript, false, 'js disabled by default');
+    assert.equal(frame.docShell.allowPlugins, false,
+                 'plugins disabled by default');
+    close(window).then(done);
+  });
+};
+
+exports['test fram has js disabled by default'] = function(assert, done) {
+  open('data:text/html;charset=utf-8,window').then(function (window) {
+    let frame = create(window.document, {
+      uri: 'data:text/html;charset=utf-8,<script>document.documentElement.innerHTML' +
+           '= "J" + "S"</script>',
+    });
+    frame.contentWindow.addEventListener('DOMContentLoaded', function ready() {
+      frame.contentWindow.removeEventListener('DOMContentLoaded', ready, false);
+      assert.ok(!~frame.contentDocument.documentElement.innerHTML.indexOf('JS'),
+                'JS was executed');
+
+      close(window).then(done);
+    }, false);
+  });
+};
+
+exports['test frame with js enabled'] = function(assert, done) {
+  open('data:text/html;charset=utf-8,window').then(function (window) {
+    let frame = create(window.document, {
+      uri: 'data:text/html;charset=utf-8,<script>document.documentElement.innerHTML' +
+           '= "J" + "S"</script>',
+      allowJavascript: true
+    });
+    frame.contentWindow.addEventListener('DOMContentLoaded', function ready() {
+      frame.contentWindow.removeEventListener('DOMContentLoaded', ready, false);
+      assert.ok(~frame.contentDocument.documentElement.innerHTML.indexOf('JS'),
+                'JS was executed');
+
+      close(window).then(done);
+    }, false);
+  });
+};
+
+require('test').run(exports);