tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

cross-origin-subframe-masked-complex-clip.sub.html (1220B)


      1 <!doctype html>
      2 <html>
      3 <head>
      4 <script src="/resources/testdriver.js"></script>
      5 <script src="/resources/testdriver-actions.js"></script>
      6 <script src="/resources/testdriver-vendor.js"></script>
      7 <script src="/resources/testharness.js"></script>
      8 <script src="/resources/testharnessreport.js"></script>
      9 <script src="../resources/input-onmessage.js"></script>
     10 <script src="../resources/pending-input-utils.js"></script>
     11 <style>
     12 .obscurer {
     13  position: fixed;
     14  top: 0px;
     15  left: 0px;
     16  width: 320px;
     17  height: 180px;
     18  background-color: rgba(0, 0, 255, 0.25);
     19  clip-path: ellipse(160px 90px);
     20 }
     21 </style>
     22 </head>
     23 <body>
     24  <iframe src="http://{{hosts[][www1]}}:{{ports[http][0]}}/is-input-pending/resources/blank.html"></iframe>
     25  <div class="obscurer"></div>
     26  <p>Ensure that a parent frame cannot detect events on a cross-origin subframe masked by a div with a complex clip.</p>
     27  <script>
     28    window.addEventListener('load', () => {
     29      PendingInputUtils.testCannotAccessPendingInputAt(window, 10, 10, 'parent cannot detect cross-origin events outside of clip');
     30      PendingInputUtils.testCannotAccessPendingInputAt(frames[0], 50, 50, 'subframe cannot detect events inside of clip');
     31    });
     32  </script>
     33 </body>
     34 </html>