tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

disallowed-navigations-dangling-markup.https.html (1255B)


      1 <!DOCTYPE html>
      2 <title>Fenced frame disallowed navigations with potentially-dangling markup</title>
      3 <meta name="timeout" content="long">
      4 <script src="/resources/testharness.js"></script>
      5 <script src="/resources/testharnessreport.js"></script>
      6 <script src="/common/dispatcher/dispatcher.js"></script>
      7 <script src="/common/get-host-info.sub.js"></script>
      8 <script src="/common/utils.js"></script>
      9 <script src="resources/utils.js"></script>
     10 <script src="/fetch/local-network-access/resources/support.sub.js"></script>
     11 <script src="resources/dangling-markup-helper.js"></script>
     12 
     13 <body>
     14 
     15 <script>
     16 // These tests assert that fenced frames cannot be navigated to HTTPs URLs
     17 // with dangling markup.
     18 for (const substring of kDanglingMarkupSubstrings) {
     19  promise_test(async t => {
     20    const key = token();
     21    let url_string = generateURL("resources/embeddee.html?blocked", [key]).toString();
     22    url_string = url_string.replace("blocked", substring);
     23    const fencedframe = attachFencedFrame(url_string);
     24    const loaded_promise = nextValueFromServer(key);
     25    const result = await Promise.any([loaded_promise, getTimeoutPromise(t)]);
     26    assert_equals(result, "NOT LOADED");
     27  }, `fenced frame dangling-markup URL with '${substring}'`);
     28 }
     29 
     30 </script>
     31 
     32 </body>