data.https.html (863B)
1 <!doctype html> 2 <meta charset=utf-8> 3 <script src="/resources/testharness.js"></script> 4 <script src="/resources/testharnessreport.js"></script> 5 <script src="resources/script-factory.js"></script> 6 <div id=log></div> 7 <script> 8 async_test(t => { 9 window.addEventListener("message", t.step_func_done(({ data }) => { 10 assert_equals(data.id, ""); 11 assert_equals(data.origin, "null"); 12 assert_false(data.sameOriginNoCORPSuccess); // This is effectively a no-op for this test 13 assert_true(data.crossOriginNoCORPFailure, "Cross-origin without CORP did not fail"); 14 })); 15 const frame = document.createElement("iframe"); 16 t.add_cleanup(() => frame.remove()); 17 frame.src = `data:text/html,<script>${encodeURIComponent(createScript("null", window.origin))}<\/script>`; 18 document.body.append(frame); 19 }, "Cross-Origin-Embedder-Policy and data: URLs"); 20 </script>