File: iframe-topics-attribute-insecure-context.tentative.http.sub.html

package info (click to toggle)
firefox 144.0-1
  • links: PTS, VCS
  • area: main
  • in suites: sid
  • size: 4,637,504 kB
  • sloc: cpp: 7,576,692; javascript: 6,430,831; ansic: 3,748,119; python: 1,398,978; xml: 628,810; asm: 438,679; java: 186,194; sh: 63,212; makefile: 19,159; objc: 13,086; perl: 12,986; yacc: 4,583; cs: 3,846; pascal: 3,448; lex: 1,720; ruby: 1,003; exp: 762; php: 436; lisp: 258; awk: 247; sql: 66; sed: 53; csh: 10
file content (36 lines) | stat: -rw-r--r-- 1,458 bytes parent folder | download | duplicates (14)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
<!doctype html>
<body>
  <script src=/resources/testharness.js></script>
  <script src=/resources/testharnessreport.js></script>
  <script src=/browsing-topics/resources/header-util.sub.js></script>
  <script>
    async_test(t => {
      test_topics_iframe_navigation_header(
          t, /*has_browsing_topics_attribute=*/true, /*is_same_origin=*/false,
          expect_topics_header_unavailable);
    }, 'test <iframe browsingtopics src=[url]></iframe> in an insecure context, where the browsingtopics attribute is set via IDL.');

    async_test(t => {
      const same_origin_src = '/browsing-topics/resources/check-topics-request-header-notify-parent.py';
      const cross_origin_src = 'https://{{domains[www]}}:{{ports[https][0]}}' +
            same_origin_src;

      let frame = document.createElement('iframe');

      window.addEventListener('message', t.step_func(function handler(evt) {
        if (evt.source === frame.contentWindow) {
          assert_equals(evt.data.topicsHeader, 'NO_TOPICS_HEADER');

          document.body.removeChild(frame);
          window.removeEventListener('message', handler);
          t.done();
        }
      }));

      document.body.appendChild(frame);

      frame.setAttribute("browsingtopics", "123");
      frame.src = cross_origin_src;
    }, 'test <iframe browsingtopics src=[url]></iframe> in an insecure context, where the browsingtopics attribute is set via setAttribute().');
  </script>
</body>