diff options
| author | toasted-nutbread <toasted-nutbread@users.noreply.github.com> | 2021-05-23 12:29:54 -0400 | 
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-05-23 12:29:54 -0400 | 
| commit | 41c0132c59a31c6d8bcc711b94b0859349e88f9b (patch) | |
| tree | f00e3a56021dc1634f30c79fa3ea71071039e0a6 /test | |
| parent | ce340d7a19f2d60a952820aac9e7c942f884eb98 (diff) | |
Improve support for sandboxed iframes (#1704)
* Add more tests
* Improve handling of errors from setupFrame
* Passively handle errors when contentDocument is null
Diffstat (limited to 'test')
| -rw-r--r-- | test/data/html/test-document2.html | 23 | 
1 files changed, 20 insertions, 3 deletions
| diff --git a/test/data/html/test-document2.html b/test/data/html/test-document2.html index bb7bfb97..fb3adb59 100644 --- a/test/data/html/test-document2.html +++ b/test/data/html/test-document2.html @@ -25,6 +25,9 @@      bottom: 0;      right: 0;  } +.danger { +    color: #c83c28; +}      </style>  <body> @@ -108,7 +111,20 @@      <y-test>          <y-description><iframe> element with srcdoc.</y-description> -        <iframe id="iframe-with-srcdoc" allowfullscreen="true" class="container"></iframe> +        <iframe allowfullscreen="true" class="iframe-with-srcdoc container"></iframe> +    </y-test> + +    <y-test> +        <y-description><iframe> element with srcdoc and <code>sandbox="allow-same-origin allow-scripts"</code>.</y-description> +        <iframe allowfullscreen="true" class="iframe-with-srcdoc container" sandbox="allow-same-origin allow-scripts"></iframe> +    </y-test> + +    <y-test> +        <y-description> +            <iframe> element with srcdoc and <code>sandbox="allow-scripts"</code>.<br> +            <span class="danger">This element is expected to not work.</span> +        </y-description> +        <iframe allowfullscreen="true" class="iframe-with-srcdoc container" sandbox="allow-scripts"></iframe>      </y-test>      <y-test> @@ -180,9 +196,10 @@      const iframeWithDataUrl = document.querySelector('#iframe-with-data-url');      const iframeWithBlobUrl = document.querySelector('#iframe-with-blob-url'); -    const iframeWithSrcdoc = document.querySelector('#iframe-with-srcdoc');      iframeWithBlobUrl.src = URL.createObjectURL(dataUrlToBlob(iframeWithDataUrl.src)); -    iframeWithSrcdoc.srcdoc = dataUrlToContent(iframeWithDataUrl.src).content; +    for (const iframeWithSrcdoc of document.querySelectorAll('.iframe-with-srcdoc')) { +        iframeWithSrcdoc.srcdoc = dataUrlToContent(iframeWithDataUrl.src).content; +    }  })();      </script> |