File: test_web_controlled_blank.html

package info (click to toggle)
firefox 141.0.3-1
  • links: PTS, VCS
  • area: main
  • in suites: sid
  • size: 4,550,588 kB
  • sloc: cpp: 7,426,506; javascript: 6,367,238; ansic: 3,707,351; python: 1,369,002; xml: 623,983; asm: 426,918; java: 184,324; sh: 64,488; makefile: 19,203; objc: 13,059; perl: 12,955; yacc: 4,583; cs: 3,846; pascal: 3,352; lex: 1,720; ruby: 1,071; exp: 762; php: 436; lisp: 258; awk: 247; sql: 66; sed: 54; csh: 10
file content (36 lines) | stat: -rw-r--r-- 1,501 bytes parent folder | download | duplicates (11) 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
 
<!doctype html>
<html>
    <head>
        <title>Bug 1813463: Web controlled about:blank</title>
    </head>
    <!--
      This work is marked with CC0 1.0. To view a copy of this license,
      visit http://creativecommons.org/publicdomain/zero/1.0
    -->
    <body>
        <p><a href="#" id="document_write">document.write example</a></p>
        <p><a href="#" id="innerhtml">innerHTML example</a></p>

        <script>
            document.getElementById("document_write").addEventListener("click", function (aEvent) {
                aEvent.preventDefault();
                let popup = window.open("about:blank", "_blank", "width=800,height=600,popup");
                popup.document.write(`
                    <h1>check security info</h1>
                    <p>initial window.location = ${popup.location}</p>
                    <script>
                        document.write("<p>new window.location = " + window.location + "</p>")
                    <${"/"}script>
                    `);
            });
            document.getElementById("innerhtml").addEventListener("click", function (aEvent) {
                aEvent.preventDefault();
                let popup = window.open("about:blank", "_blank", "width=800,height=600,popup");
                popup.stop();
                popup.document.body.innerHTML = `
                    <h1>check security info</h1>
                    <p>window.location = ${popup.location}</p>`;
            });
        </script>
    </body>
</html>