gitorious.org Git - webkit:qtwebkit.git/blob - LayoutTests/http/tests/security/xssAuditor/object-tag-javascript-url.html

1 <!DOCTYPE html>

2 <html>

3 <head>

4 <script src="resources/utilities.js"></script>

5 <script>

6 if (window.layoutTestController) {

7 layoutTestController.dumpAsText();

8 layoutTestController.setXSSAuditorEnabled(true);

9 layoutTestController.waitUntilDone();

10 notifyDoneAfterReceivingBeforeloadFromIds(["object"]);

11 }

12 </script>

13 </head>

14 <body>

15 <iframe src="http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?relay-target-ids-for-event=beforeload&q=<object id='object' data='javascript:alert(document.domain)'></object>">

16 </iframe>

17 </body>

18 </html>