tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

no-manifest-from-iframe-manual.html (772B)


      1 <!DOCTYPE html>
      2 <title>
      3  Don't install manifests that are not top-level from browsing contexts
      4 </title>
      5 <link rel="help" href="https://html.spec.whatwg.org/#link-type-manifest" />
      6 <h1>Don't install manifests that are not top-level from browsing contexts</h1>
      7 <p>
      8  To pass, the user agent must not use the manifest in iframe. The user agent
      9  must behave as if there is no manifest present.
     10 </p>
     11 <script>
     12  const iframe = document.createElement("iframe");
     13  iframe.srcdoc = "<h1>hi</h1>";
     14  document.body.append(iframe);
     15  iframe.onload = () => {
     16    const link = iframe.contentDocument.createElement("link");
     17    link.rel = "manifest";
     18    link.href = "/appmanifest/name-member/name-member-fail.webmanifest";
     19    iframe.contentDocument.head.append(link);
     20  };
     21 </script>