<!DOCTYPE html>
<html>
<!--
https://bugzilla.mozilla.org/show_bug.cgi?id=postMessage
-->
<head>
<title>Dispatching MessageEvent across origins</title>
<script type="text/javascript" src="/tests/SimpleTest/SimpleTest.js"></script>
<link rel="stylesheet" type="text/css" href="/tests/SimpleTest/test.css" />
</head>
<body>
<a target="_blank" href="https://bugzilla.mozilla.org/show_bug.cgi?id=postMessage">Mozilla Bug 387706</a>
<p id="display"></p>
<div id="content" style="display: none"></div>
<iframe src="http://example.com/" name="otherDomain"></iframe>
<pre id="test">
<script class="testbody" type="application/javascript">
/** Test for Bug 387706 **/
SimpleTest.waitForExplicitFinish();
function run()
{
try
{
var msg = new MessageEvent('message', { bubbles: true, cancelable: true,
data: "foo", origin: "http://evil.com",
source: window });
try
{
var ex;
window.frames.otherDomain.dispatchEvent(msg);
ok(false, "should have thrown a security exception per HTML5");
}
catch (e)
{
ok(true, "correctly threw an exception (security exception, but " +
"what that entails isn't yet defined in the spec)");
}
}
catch (e)
{
ok(false, "threw exception during execution: " + e);
}
finally
{
SimpleTest.finish();
}
}
addLoadEvent(run);
</script>
</pre>
</body>
</html>