File: javascript-url-same-origin.https.html

package info (click to toggle)
firefox-esr 91.13.0esr-1~deb11u1
  • links: PTS, VCS
  • area: main
  • in suites: bullseye
  • size: 3,375,652 kB
  • sloc: cpp: 5,762,054; javascript: 5,481,714; ansic: 3,121,191; python: 851,492; asm: 331,172; xml: 178,949; java: 155,554; sh: 63,704; makefile: 20,127; perl: 12,825; yacc: 4,583; cs: 3,846; objc: 3,026; lex: 1,720; exp: 762; pascal: 635; php: 436; lisp: 260; awk: 231; ruby: 103; sed: 53; sql: 46; csh: 45
file content (33 lines) | stat: -rw-r--r-- 1,031 bytes parent folder | download | duplicates (4) 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
 
<!DOCTYPE html>
<meta charset="utf-8">
<script src="/common/get-host-info.sub.js"></script>
<body>
<script>
'use strict';
const params = new URLSearchParams(location.search);
const childURL = JSON.stringify(encodeURIComponent(params.get('childURL')));
const childName = JSON.stringify(params.get('childName'));
location.assign(`javascript:\`<body><script>
const child = window.open(${childURL}, ${childName});
const bc = new BroadcastChannel(${childName});

bc.addEventListener('message', ({data}) => {
  if (data === 'close') {
    close();
    return;
  }
  if (data === 'inspectChild') {
    const iframe = document.createElement('iframe');
    iframe.onload = () => {
      const payload = {
        childClosed: child.closed
      };
      iframe.contentWindow.postMessage(payload, '*');
    };
    iframe.src = '${get_host_info().HTTPS_ORIGIN}/html/cross-origin-opener-policy/resources/postback.html?channel=${params.get('childName')}';
    document.body.appendChild(iframe);
  }
});
<\/script></body>\``);
</script>
</body>